homeemployee.store
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of homeemployee.store
The domain homeemployee.store appears to present itself as a shopping or account-based web platform, but the visible page content is inconsistent. The page title references "Robinson Mall," while the screenshot mainly shows a sparse login and registration form with fields for username and password, plus navigation items such as Home, Job, Cart, and Account. This mixed presentation may indicate a template-based site or a portal combining shopping and task-related features.
Based on the domain name, the site may be attempting to attract users interested in home-based work or employment-related activity, while the ".store" extension and on-page references to cart and orders suggest an e-commerce component. The available data does not identify a clearly disclosed operator, and the branding shown in the page title does not appear to align cleanly with the domain name, which can make the site's purpose and ownership harder to verify.
Safety Assessment for homeemployee.store
This domain was flagged by 15 out of 91 security engines at the time of the scan, with multiple detections describing it as phishing or malicious. That level of multi-engine agreement is a meaningful risk signal, especially when combined with the page's credential-entry form and the mismatch between the domain name and the displayed title. The site also has a very recent registration age of 53 days and no measurable popularity ranking, both of which are commonly seen with short-lived fraudulent campaigns.
At the same time, some supporting checks were clean at the time of the scan: the malware file scan did not identify flagged files, and major blacklist and threat-database checks included in the dataset did not report listings. However, clean file and blacklist results do not outweigh a broad phishing consensus from multiple security engines, particularly for a newly registered site that appears to request login credentials. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served over HTTPS with a valid Let's Encrypt certificate at the time of the scan and was routed through Cloudflare infrastructure, with the server IP resolving to Cloudflare-hosted addresses in Canada. Nameservers also point to Cloudflare, which suggests the site is using a CDN or reverse-proxy layer rather than exposing its origin server directly.
From a security posture perspective, DNSSEC appears to be unsigned, which is not uncommon but provides less DNS integrity protection than a signed configuration. The domain is very new, and the combination of recent registration, limited transparency about ownership, and a login-focused page with inconsistent branding may increase uncertainty from a defensive standpoint.
Share your experience with this website. Was it safe? Did you encounter any issues?