am.xewff.lol
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of am.xewff.lol
The domain am.xewff.lol appears to host a login page styled to resemble Amazon, with the page title shown as "Log in | AMAZON" and a visible Amazon-like logo in the screenshot. The page presents fields for a phone number and password, along with account-related links such as registration and password recovery, suggesting it is intended to collect user credentials rather than provide general informational content.
Based on the domain name, this does not appear to be an official Amazon-owned web address. The hostname uses an unrelated .lol domain and a subdomain structure that does not match Amazon's normal branding conventions. No clear operator identity, company details, or legitimate business information are visible in the provided scan data, which makes the site's ownership difficult to verify at the time of this scan.
Safety Assessment for am.xewff.lol
At the time of this scan, automated malware checks did not report active malicious files, and 0 out of 91 security engines flagged the domain. In addition, the checked threat databases and blacklist sources did not report listings for malware, phishing, or other content-based abuse. Those are positive point-in-time signals, but they do not by themselves confirm legitimacy, especially for a newly created site.
There are also notable risk indicators. The domain is only 1 day old, has no established traffic ranking, and the visible page closely imitates Amazon branding while using an unrelated domain name. A fresh site that appears to mimic a major brand's login page may be a look-alike intended to capture account credentials, even when broad security-engine detections are still at zero. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, with hosting and reverse-proxy infrastructure appearing to be provided through Cloudflare. The server IP resolves to Cloudflare infrastructure in Canada, and the nameservers also point to Cloudflare. A valid certificate helps encrypt traffic in transit, but it does not verify that the site itself is legitimate.
From a domain-security perspective, the registration is extremely recent and DNSSEC appears to be unsigned. The scan found only a small number of static assets and no flagged files or iframes at the time of analysis. Even so, the combination of very recent registration, obscured hosting behind a CDN, and brand-like login content on an unrelated domain may warrant caution.
Share your experience with this website. Was it safe? Did you encounter any issues?