fituree-menupay-id.offcou.beauty
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of fituree-menupay-id.offcou.beauty
This domain appears to host a page themed around DANA, an Indonesian digital wallet and financial-services brand. The page title and visible interface text promote features such as DANA Cicil, PayLater activation, refund processing, and device logout, suggesting it is trying to present itself as a customer-service or account-management portal for financial account actions.
Based on the domain structure, however, the site does not appear to use an official DANA-branded domain. Instead, it is hosted on a recently registered subdomain under offcou.beauty, which may indicate a third-party or unofficial setup rather than a primary corporate web property. The content and branding shown in the screenshot suggest the page is intended to attract users seeking payment, credit, or account-support services.
Safety Assessment for fituree-menupay-id.offcou.beauty
Multiple independent signals indicate elevated risk at the time of this scan. The domain was flagged by 16 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. The page also appears to imitate a financial-services brand while using an unrelated domain name, which may be consistent with credential-harvesting or social-engineering activity. Its very recent registration age of 19 days and lack of established traffic ranking add to the concern.
The malware scan did not detect malicious files in the sampled page resources, which can happen when a phishing page relies on deceptive content rather than downloadable malware. Threat-database checks were otherwise largely clean, but the domain's IP address is listed on one mail-reputation blocklist, which is a weaker secondary signal and not, by itself, proof of harmful website content. Even so, the broader pattern of multi-engine phishing detections, financial-brand imitation, and a newly created domain materially increases risk.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued by a mainstream certificate authority, with hosting and reverse-proxy infrastructure provided through Cloudflare. The server IP resolves to Cloudflare infrastructure in Toronto, Canada, and the nameservers also point to Cloudflare. A valid certificate helps encrypt traffic in transit, but it does not verify that the site itself is trustworthy or officially affiliated with the brand it displays.
DNSSEC appears to be unsigned, so there is no DNSSEC validation layer visible from the provided data. The domain is very new, and the page pulls additional assets from another related offcou.beauty subdomain, which may indicate a distributed phishing-kit style setup. No malicious files were flagged in the limited file scan, but the overall infrastructure pattern still warrants caution based on available data.
Share your experience with this website. Was it safe? Did you encounter any issues?