conf1rmaci0n365.iceiy[.]com
Category: Business
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of conf1rmaci0n365.iceiy[.]com
The domain conf1rmaci0n365.iceiy[.]com appears to be a subdomain rather than a standalone primary website, and its naming pattern resembles a login or account-confirmation themed page. The string "conf1rmaci0n365" uses character substitutions that may be intended to mimic a legitimate confirmation or productivity-related service name, which is commonly seen in credential-harvesting campaigns. Based on available classification data, the URL has been associated with business-related and fraud-related categorizations.
At the time of this scan, the visible page did not present an active service or business website. Instead, it displayed a hosting-provider suspension notice stating that the domain had been suspended for reaching server limits or a similar issue. This suggests the subdomain is not currently operating as a normal public-facing site and may previously have hosted different content than what is visible now.
Safety Assessment for conf1rmaci0n365.iceiy[.]com
Scan results indicate elevated risk signals for this URL. It was flagged by 19 out of 91 security engines, with multiple scanners classifying it as phishing or fraud-related. In addition, the domain naming pattern closely resembles a confirmation-style service name while using substituted characters, which may indicate an attempt to appear trustworthy or imitate a legitimate service.
At the same time, the page currently visible in the screenshot is a suspension notice rather than an active phishing form, and a malware scan of the retrieved content did not detect malicious files at the time of this scan. Blacklist coverage appears mixed: some threat databases did not list the URL, while several security engines still flagged it. This kind of mismatch can occur when abusive content has been removed, replaced, or temporarily disabled.
Based on these findings, this website may pose potential risks to visitors. Even though no malicious files were detected in the current page content at the time of this scan, the strong phishing-related detection pattern and suspicious naming convention are notable concerns.
Technical Description
The site presented a valid SSL/TLS certificate issued by ZeroSSL, expiring in June 2026. It resolved to IP address 185.27.134.218, used the openresty web server, and appeared to be hosted by I FastNet LTD in the United Kingdom. The domain is approximately five years old, registered through Porkbun LLC, and uses BYET.ORG nameservers.
DNSSEC is not enabled, which means DNS responses are not cryptographically signed. The current page title and screenshot indicate a suspended hosting state rather than a functioning application. While the certificate is valid and the infrastructure is reachable, the suspension status and prior phishing-related detections suggest the URL should be treated cautiously based on available data.
Share your experience with this website. Was it safe? Did you encounter any issues?