box-file-1mer.p-2myde94o.workers.dev
Category: Spam Urls
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of box-file-1mer.p-2myde94o.workers.dev
This domain appears to be a Cloudflare Workers-hosted web page rather than a conventional standalone website. The hostname structure and the visible page text, "Preparing your secure document...", suggest it may be used as a temporary landing page for file sharing, document delivery, or a gated access workflow. Based on the domain naming pattern, it does not appear to represent a well-established branded service or organization homepage.
The available categorization data associates the site with spam, phishing, and generic web hosting classifications from multiple web-classification providers. That does not by itself prove harmful intent, but it does indicate that the domain has been interpreted by some systems as potentially related to fraudulent or unsolicited activity. The screenshot shows a minimal loading-style page with very limited context, which makes it difficult to verify a legitimate business purpose from content alone.
Safety Assessment for box-file-1mer.p-2myde94o.workers.dev
Scan results show that 3 out of 91 security engines flagged this domain at the time of the scan, with detections broadly related to phishing, spam, and fraud. In addition, multiple web-classification providers categorized it in ways commonly associated with deceptive or abusive activity. While the malware scan did not identify malicious files on the page that was checked, that result is limited to the specific content retrieved during the scan and does not rule out social-engineering risk.
Blacklist and threat-database checks were largely clean at the time of this scan, including major content-focused threat feeds, but the domain's IP address was listed on one mail-reputation blocklist. That type of listing is a weaker signal than direct malware or phishing confirmation, yet it still adds some caution. The page itself is sparse and presents a generic "secure document" loading message, which may be consistent with benign file delivery but can also resemble lures used in credential-harvesting campaigns.
Taking the mixed signals together — several engine detections, suspicious categorization, lack of established site identity, and a low published trust score — this website may pose potential risks to visitors at the time of this scan.
Technical Description
The site uses a valid Let's Encrypt SSL certificate and is served through Cloudflare infrastructure on IP address 172.67.205.9, with hosting geolocated to Canada based on available IP data. The domain is approximately seven years old, registered through Cloudflare, and uses Cloudflare nameservers. SSL presence indicates encrypted transport, but encryption alone does not verify the trustworthiness of the underlying content.
DNSSEC appears to be unsigned, which means DNS responses may not benefit from DNSSEC validation. The server stack is fronted by Cloudflare and the protocol details were not fully identified in the scan. No malicious files, external links, or iframes were detected in the retrieved page, but the minimal content and hosted-subdomain setup may limit visibility into the site's broader behavior.
Share your experience with this website. Was it safe? Did you encounter any issues?