fraud-transaction-esl-org.sbs
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of fraud-transaction-esl-org.sbs
This domain appears to present itself as an online banking login page associated with ESL, showing branding, customer sign-in fields, enrollment prompts, and financial-service imagery such as lender and deposit-insurance badges. Based on the page layout and the domain wording, it appears intended to collect account login information from visitors seeking access to online banking services.
The site does not appear to use an official brand domain structure. Instead, it uses a newly registered .sbs domain with a long, unusual name that combines terms such as "fraud," "transaction," and "esl-org," which may indicate an attempt to resemble or misuse a financial brand identity. Based on the available screenshot and classifications, this appears to be a financial-services-themed page that may be operated by an unknown third party rather than the legitimate institution it visually references.
Safety Assessment for fraud-transaction-esl-org.sbs
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 12 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. In addition, a major threat database listed the URL for social-engineering activity, which is a strong indicator that the page may be intended to deceive visitors into submitting sensitive information.
The screenshot further increases concern because the page closely imitates a banking login portal while using a domain name that does not appear consistent with an official financial institution website. The domain is also extremely new, with an age of 0 days at the time of this scan, which is commonly seen in short-lived phishing operations. Although the malware scan did not detect malicious files, phishing pages often rely on credential harvesting rather than downloadable malware.
A DNS-based mail-reputation blocklist also lists the domain's IP address, though that signal is weaker than the phishing detections and social-engineering listing. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS and presented a valid SSL/TLS certificate for the scanned domain, expiring in 2027-07-21. A valid certificate only confirms encrypted transport to that domain and does not by itself verify legitimacy. The server was hosted on IP address 66.55.66.105, associated in the scan data with Cloud Web Manage, with geolocation reported as Toronto, Canada.
From a domain-security perspective, the registration appears very recent, the registrar is NameSilo, and DNSSEC is unsigned. The web server software and exact TLS protocol details were not identified in the scan data. No malicious files or flagged external links were reported by the page-level malware scan, but the combination of fresh registration, brand-like financial login content, and multi-engine phishing detections is a notable concern at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?