globafas[.]shop
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of globafas[.]shop
The domain globafas[.]shop appears to host a Portuguese-language page themed around collecting banking details. The visible content references OLX and asks visitors to submit personal and financial information such as full name, phone number, CPF, date of birth, and PIX key details. Although the page title is set to "Google," the screenshot content does not appear to match that title, which may indicate misleading page metadata or a hastily assembled template.
Based on the screenshot and linked assets, the site appears to be built with common web components and frontend libraries rather than representing a well-established branded service. The domain itself does not clearly identify a known organization, and the available registration data does not show a long operating history. At the time of this scan, the page appears to function more as a data-collection form than as a full business or informational website.
Safety Assessment for globafas[.]shop
At the time of this scan, no malware detections were reported by 0 out of 92 security engines, and the checked blacklist databases were clean. The malware scan also reported no flagged files on the site itself. However, one referenced external domain was associated with a generic suspicious heuristic, which is a relatively low-confidence signal on its own and does not by itself confirm malicious activity.
That said, there are several contextual concerns not captured by malware engines alone. The domain is extremely new, with an age of 0 days, has no established traffic ranking, and the page requests sensitive banking and identity information while visually referencing a known marketplace brand. The mismatch between the page title ("Google") and the visible OLX-themed content may also be a warning sign. Based on the available data, the site may be attempting to collect financial information under branding that may not belong to the domain owner.
Based on these findings, this website may pose potential risks to visitors, especially if asked to submit personal or banking details.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate at the time of this scan. DNSSEC appears to be unsigned, and the domain uses nameservers associated with a parking-oriented DNS provider. Hosting appears to be with a mainstream shared hosting provider in Indonesia, and the observed asset structure suggests a WordPress-based or template-driven frontend using common JavaScript and CSS libraries.
From a technical risk perspective, the strongest concerns are not malware indicators but operational signals: a brand-new domain, limited reputation history, unsigned DNSSEC, and a page designed to collect sensitive financial data. These factors do not prove abuse, but they may increase uncertainty and reduce trust in the site at the time of review.
Share your experience with this website. Was it safe? Did you encounter any issues?