ghdnsserverns.beer
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of ghdnsserverns.beer
The domain ghdnsserverns.beer appears to be a recently registered website using the .beer top-level domain, with infrastructure routed through Cloudflare nameservers and hosting associated with a provider in Germany. Based on the domain string alone, it does not clearly indicate a recognizable brand, business, or public service, and the available scan data does not show evidence of a substantial public-facing website or established online presence.
The name itself resembles a technical or infrastructure-related label rather than a typical consumer website, which may suggest it is being used for backend, temporary, or narrowly targeted purposes. It is not ranked in major traffic measurements, and the domain age is relatively short, which can make reputation assessment more uncertain. Based on available data, it does not appear to be an established mainstream web property.
Safety Assessment for ghdnsserverns.beer
Multiple security engines flagged this domain at the time of the scan, with detections describing it as malicious, malware-related, suspicious, or phishing-related. That level of multi-engine agreement is a strong cautionary signal, especially when combined with the very low trust score, lack of traffic ranking, and relatively recent registration date. Although one malware scan did not identify flagged files on the page it checked, that clean result is limited in scope and does not outweigh the broader reputation signals.
Blacklist and threat-database results were mixed rather than uniformly clean. Major content-malware and phishing databases did not report a listing at the time of the scan, but one blacklist provider did flag the domain. When a domain is newly registered and also receives broad negative reputation signals from many security engines, the absence of a listing in some databases does not remove the possibility of abuse, particularly if the site is newly active or narrowly targeted.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain uses a valid Let's Encrypt SSL certificate that was active at the time of the scan, which indicates encrypted HTTPS connectivity but does not by itself establish trustworthiness. DNSSEC appears to be unsigned, meaning DNS responses may not benefit from that additional layer of authenticity protection. The domain is configured with Cloudflare nameservers, while the resolved hosting IP was associated with infrastructure in Frankfurt am Main, Germany.
From an infrastructure perspective, the site appears relatively lightweight: the web server type and protocol details were not identified in the provided scan, and no external links, referenced domains, or iframes were observed in the sampled content. The combination of recent registration, limited observable content, and substantial reputation-based detections may warrant caution from a technical risk standpoint.
Share your experience with this website. Was it safe? Did you encounter any issues?