krf.cc
Category: Cryptocurrency
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of krf.cc
krf.cc appears to be a cryptocurrency-themed website presenting itself under the name "GLOBE X." Based on the homepage screenshot, it promotes digital-asset investing with marketing language such as "Invest Smarter Not Harder" and invites visitors to register. The visible content suggests a platform related to crypto insights, trading, or account onboarding rather than a general informational site.
The domain itself is short and does not clearly identify an established company or organization. Publicly visible scan data does not provide a verified operator name, and the page title "【New message】" is somewhat inconsistent with the branding shown on the page. The presence of many language-specific login-related URLs indicates the site may be structured to serve multilingual sign-in or registration pages, which is common for international financial or crypto-oriented platforms but can also appear on lower-transparency operations.
Safety Assessment for krf.cc
Several scan signals raise concerns at the time of this scan. The domain was flagged by 5 out of 91 security engines, with detections broadly associated with phishing, malicious activity, or spam-related behavior. In addition, the malware scan marked numerous login- and account-related pages as malicious, including multilingual paths tied to registration or sign-in flows. Those findings are more concerning than a single isolated heuristic because they affect multiple pages and align with the site's account-oriented structure.
Blacklist and threat-database results were mixed. Major content-focused threat databases did not report the domain at the time of this scan, which is a moderating factor, but the domain's IP address was listed on one mail-reputation blocklist. That type of listing is a weaker signal than direct phishing or malware listings, yet it still adds some caution. The site is also not ranked in major traffic data despite being an older domain, and the branding and page title combination may warrant additional scrutiny.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate expiring on 2026-08-30. It appears to be served by nginx from an AWS EC2 host in Frankfurt, Germany, using the IP address 63.179.73.97. The domain is relatively old, created in 2014 and registered through Amazon Registrar, which can sometimes indicate a longer-lived asset rather than a throwaway domain.
DNSSEC appears to be unsigned, which means DNS responses may not benefit from that additional integrity layer. While the TLS certificate is valid, that alone does not establish trustworthiness. The more notable technical concern in this scan is the concentration of flagged login-related pages and flagged external script references, which may indicate suspicious page behavior or content at the time of analysis.
Share your experience with this website. Was it safe? Did you encounter any issues?