cafam-html.docmanager.app
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of cafam-html.docmanager.app
cafam-html.docmanager.app appears to be a subdomain hosted under the docmanager.app domain rather than a standalone primary website. Based on the naming pattern, it may be intended to present HTML-based document content, file-sharing pages, or a web-accessible document management interface. The specific subdomain label "cafam-html" could reference a branded or organization-specific document page, but the scan data does not provide enough visible site content to confirm its exact purpose.
The infrastructure suggests the site is delivered through Cloudflare-hosted services and uses a valid TLS certificate, which is common for both legitimate and abusive web deployments. No clear business, publisher, or organizational ownership is identified in the provided scan details, and the domain does not appear to have an established traffic ranking. Based on the available data, this looks like a low-visibility web page or application endpoint rather than a broadly recognized public website.
Safety Assessment for cafam-html.docmanager.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 14 out of 92 security engines, with many of those detections classifying it as phishing or otherwise malicious. That level of multi-engine agreement is a stronger warning sign than a single heuristic alert, particularly for a low-visibility subdomain with no meaningful traffic ranking.
Other signals are more mixed. The malware scan did not identify flagged files, and major content-malice and threat-database checks were largely clean at the time of this scan. However, one blacklist-style provider did list the domain with a generic malicious-object label, which adds some caution even though it is less conclusive than broad blacklist consensus. Taken together, the strongest evidence here comes from the relatively high number of phishing-related engine detections rather than from file-based malware findings.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, with expiry listed as 2026-12-16. It is hosted behind Cloudflare infrastructure, with the web server and hosting both attributed to Cloudflare and the observed IP address resolving to 172.67.73.205. The nameservers are also on Cloudflare, indicating the domain relies on that provider for DNS and edge delivery.
From a configuration standpoint, DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from DNSSEC validation. The domain age is about 3 years, so this is not a newly created domain; however, age alone does not offset the phishing-related detections seen in the scan data.
Share your experience with this website. Was it safe? Did you encounter any issues?