deduction.onlinepaye.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of deduction.onlinepaye.com
The domain deduction.onlinepaye.com appears to be a subdomain hosted under onlinepaye.com rather than a standalone registered domain. Based on its naming pattern, it may be intended to reference payroll, payment, or deduction-related activity, possibly suggesting a financial or account-processing theme.
There is limited public-facing context in the scan data, and no category labels or content indicators were provided to confirm a legitimate business purpose. The lack of ranking data and the very recent creation timeframe suggest this may be a newly deployed web endpoint rather than an established public website.
Safety Assessment for deduction.onlinepaye.com
This subdomain shows several cautionary signals at the time of this scan. It was flagged by 5 out of 91 security engines, with multiple detections describing phishing-related behavior and one indicating spam-related concerns. In addition, the domain is very new at 23 days old and has no observed traffic ranking, which can increase uncertainty when assessing legitimacy.
Blacklist and threat-database results were mixed. No threats were detected by the malware scan provided, and major content-focused browsing protection checks were clean at the time of this scan. However, the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal than direct malware or phishing detections but still worth noting as a minor concern.
Taken together, the combination of multi-engine phishing flags, very recent registration, and limited reputation history suggests elevated risk. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, expiring on 2026-10-23. It is hosted behind Cloudflare infrastructure on IP address 104.21.11.35, with Cloudflare nameservers and web-serving components. This setup is common for both legitimate and abusive sites, so it should not be treated as a trust signal by itself.
DNSSEC appears to be unsigned, which means DNS responses may not benefit from DNSSEC validation. No malicious files, external links, referenced domains, or iframes were identified in the supplied scan snapshot, but the limited content footprint also means there was little observable material to validate.
Share your experience with this website. Was it safe? Did you encounter any issues?