guadian-security-bot[.]cam
Category: Newly Registered Websites
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of guadian-security-bot[.]cam
The domain guadian-security-bot[.]cam appears to host a landing page styled to resemble a Telegram group or channel invitation page. Based on the screenshot and page title, the site presents a "Join Channel" prompt and uses Telegram-like branding elements, while linking to an external file hosted on a Telegram-related content delivery domain. The domain name itself does not appear to match Telegram's official web properties and may have been chosen to suggest a security or bot-related function.
Available classification data labels the site as a newly registered website, and the domain was created only 2 days before this scan. The visible content appears to promote an adult-oriented channel named "Pervy," with a profile image and subscriber/member counts shown on the page. Based on the domain naming, page presentation, and lack of broader site identity information, this appears to be a single-purpose promotional or redirect-style page rather than an established service website.
Safety Assessment for guadian-security-bot[.]cam
Several scan indicators suggest elevated risk at the time of this scan. The domain was flagged by 6 out of 91 security engines, with detections broadly associated with phishing or malicious activity. In addition, the site is extremely new, has no measurable popularity ranking, and uses a presentation that appears to imitate Telegram branding while operating from an unrelated .cam domain. That combination may be consistent with deceptive or short-lived campaign infrastructure.
The screenshot also shows a page encouraging users to join a channel, with branding and layout that could cause some visitors to assume they are interacting with an official Telegram page. Because the domain does not appear to be an official Telegram property, this resemblance may indicate a look-alike setup intended to redirect users or solicit clicks under misleading branding. Although the malware file scan did not detect flagged files and blacklist checks were largely clean at the time of this scan, newly created domains can sometimes evade broader blocklists early in their lifecycle.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served over HTTPS with a valid Let's Encrypt certificate, fronted by Cloudflare infrastructure, and resolved to an IP associated with Cloudflare in Toronto, Canada. The nameservers also point to Cloudflare, suggesting the operator is using a reverse-proxy/CDN setup that can obscure origin hosting details. DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from that additional integrity layer.
From the scan data provided, only 2 files and 2 external links were observed, with no flagged files or iframes detected. However, the domain's age of 2 days, lack of ranking, and the mismatch between the domain name and the branded content are notable technical risk indicators. The use of a very new domain for a branded landing page may warrant additional caution.
Share your experience with this website. Was it safe? Did you encounter any issues?