checkout-tws.org
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of checkout-tws.org
checkout-tws.org appears to be a recently registered web domain using a name centered on the word "checkout," which commonly suggests a payment, order-confirmation, or transaction-related web page. Based on the limited scan context and the linked assets, the site may be built with a modern JavaScript framework and may present an interactive front end rather than a simple static page.
The domain does not appear to be associated with an established, high-traffic public website, as it is not ranked in major traffic listings and was registered only days before this scan. No clear operator identity is provided in the scan data, so ownership and business legitimacy could not be independently verified from the available information.
Safety Assessment for checkout-tws.org
This domain shows multiple risk indicators at the time of this scan. It was flagged by 11 out of 91 security engines, with several classifying it as phishing or otherwise malicious, while broader threat-database checks were clean. That combination can occur with newly created sites, especially when engine-based detections appear before wider blacklist coverage catches up. The domain's age is also a notable concern: it was registered only 8 days before the scan, which may increase uncertainty and risk for visitors.
The site was not flagged by the malware page scan, and no suspicious files, external links, or iframes were identified in that specific crawl. However, a clean page-level file scan does not outweigh the stronger consensus signal from multiple security engines when the domain is very new and appears transaction-related. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate provider, with expiry listed as 2026-09-20. It is hosted behind Cloudflare infrastructure on IP address 172.67.181.152, with Cloudflare nameservers and an unsigned DNSSEC configuration. The web server is reported as Cloudflare, and the hosting location is shown as Toronto, Canada.
From a technical standpoint, the presence of HTTPS is a basic positive sign for transport encryption, but it should not be treated as proof of legitimacy. Additional caution is warranted because the domain is extremely new, DNSSEC is not enabled, and the scan data indicates notable reputation-based detections despite clean results from several blacklist databases at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?