dd1.qzz.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of dd1.qzz.io
dd1.qzz.io appears to be a subdomain hosted under qzz.io rather than a standalone branded website. Based on the available scan context, it does not present clear public-facing business, editorial, or service information, and there are no category labels or content indicators showing a legitimate organizational purpose. The lack of ranking data and the use of a generic-looking subdomain structure may indicate a disposable or campaign-specific web endpoint rather than an established primary website.
The domain is registered through GANDI SAS and is fronted by Cloudflare infrastructure, with a valid TLS certificate in place. While those are common technical choices for many websites, they do not by themselves establish legitimacy. Based on the domain pattern and the phishing-oriented scan results, this subdomain may have been used for short-lived web activity such as credential collection, redirects, or other limited-purpose hosting.
Safety Assessment for dd1.qzz.io
Multiple security engines flagged this domain at the time of the scan, with 18 out of 91 reporting malicious or phishing-related detections. In addition, one threat-database listing was present, while several major blacklist and malware-reference sources did not report a listing. This mixed pattern can occur with newer or narrowly targeted phishing pages, where some systems detect abusive behavior earlier than others.
Other signals are more neutral: the malware page scan did not identify flagged files, there were no external links or iframes reported, and the domain has a valid TLS certificate. However, those factors do not outweigh the relatively strong multi-engine phishing consensus, especially given the lack of established traffic history and the generic subdomain format. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served through Cloudflare infrastructure on IP address 188.114.97.0, with hosting geolocated to Toronto, Canada. It presented a valid Let's Encrypt SSL/TLS certificate expiring on 2026-08-05, which indicates encrypted transport was available at the time of the scan. The reported web server was Cloudflare.
DNSSEC appears to be unsigned, meaning DNS responses may not benefit from DNSSEC validation. The domain uses four nameservers under digitalplat.org. No DNS-based mail-reputation blocklist hits were reported in the provided data, but the broader security concern comes from the high number of phishing-related detections by security engines rather than from infrastructure misconfiguration alone.
Share your experience with this website. Was it safe? Did you encounter any issues?