finance91-illo18.sbs
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of finance91-illo18.sbs
finance91-illo18.sbs appears to be a newly registered domain using a generic finance-themed naming pattern. Based on the domain string alone, it may be intended to relate to financial content, services, or account-style interactions, but the available scan data does not provide clear evidence of a developed business, organization, or public-facing service behind it.
The domain is not ranked in major traffic measurements and was registered very recently, which can make independent reputation assessment more difficult. No clear operator identity, company branding, or established website purpose is evident from the provided data, so its exact function remains uncertain at the time of this scan.
Safety Assessment for finance91-illo18.sbs
Several security signals suggest caution. At the time of this scan, the domain was flagged by 7 out of 91 security engines, with multiple detections describing it as phishing, malicious, or suspicious. In addition, one threat database listing and one mail-reputation style blocklist listing were present. While a DNS-based mail-reputation listing is a weaker signal than direct malware or phishing detections, it still adds some concern and means blacklist-related checks were not fully clean.
Other signals are mixed. A malware scan did not identify flagged files, and several major threat databases showed no listing at the time of this scan. However, the domain is only 1 day old, has no established traffic ranking, and uses a disposable-looking naming pattern, all of which can increase uncertainty and are commonly seen with short-lived abusive campaigns.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain uses a valid SSL certificate issued by a mainstream certificate authority, which means traffic to the site may be encrypted in transit. It is hosted behind Cloudflare infrastructure on IP address 188.114.96.2, with Cloudflare nameservers and a web server identified as Cloudflare. DNSSEC appears to be unsigned.
From a security posture perspective, the main concerns are reputational rather than configuration-based: the domain is extremely new, unsigned at the DNSSEC layer, and associated with multiple phishing-related detections from security engines. The use of a CDN or reverse proxy can be normal, but in this case it also limits direct visibility into origin infrastructure.
Share your experience with this website. Was it safe? Did you encounter any issues?