danalytics.daniyal.top
Category: Malicious Web Sites
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of danalytics.daniyal.top
The subdomain danalytics.daniyal.top appears to host a web login page branded as "Umami," which is commonly associated with self-hosted website analytics software. Based on the page title and screenshot, the site seems to present a simple username-and-password authentication form rather than a public-facing content website.
The naming pattern suggests this may be intended as an analytics or administration endpoint under the daniyal.top domain. There is no clear publisher identity, company information, or descriptive site content visible on the page, so the operator cannot be independently verified from the available scan data alone.
Safety Assessment for danalytics.daniyal.top
This domain was flagged by 9 out of 91 security engines at the time of this scan, with multiple detections describing it as phishing or otherwise malicious. In addition, several web-classification sources categorized the site as phishing/fraud or malicious web content. Those signals are notable because they come from multiple independent security systems rather than a single low-confidence heuristic.
At the same time, the malware scan did not identify malicious files on the page, and the checked blacklist databases were clean at the time of review. That combination can occur when a site is suspected of credential harvesting or deceptive login activity rather than serving obvious malware payloads. The screenshot shows a bare login form on a low-profile, unranked subdomain with limited contextual information, which may increase caution for visitors.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate that was current at the time of this scan, and it resolves to an IP hosted by Hetzner in Falkenstein, Germany. Nameservers are provided through Cloudflare, while DNSSEC appears to be unsigned. The page also appears to load Next.js-style static assets from the same host.
From a security posture perspective, HTTPS alone should not be treated as a trust signal, since phishing pages commonly use valid certificates as well. No malicious files, flagged external links, or iframe-based threats were identified in the page scan, but the combination of a minimal login interface, unsigned DNSSEC, and multi-engine phishing detections may warrant additional scrutiny.
Share your experience with this website. Was it safe? Did you encounter any issues?