ll-24.cc
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ll-24.cc
The domain ll-24.cc appears to host a Russian-language landing page branded as “Лаки Лучано — Подпольный клуб” (“Lucky Luciano — Underground Club”). Based on the screenshot and page text, the site presents itself as a themed private club or underground community, using a stylized noir aesthetic and offering contact options through messaging platforms such as Telegram, Signal, and Matrix. The page also references discounts and includes a button for contacts, suggesting it may be intended to direct visitors into private communication channels rather than provide detailed public information on-site.
Available classification data associates the domain with phishing, suspicious content, and drugs-related labeling from multiple web-classification sources. The homepage imagery and the “license for trade” wording imply the site may be connected to restricted or illicit goods, although the exact products or services are not clearly disclosed on the visible landing page. Ownership details are limited to registrar and infrastructure records, and no clear business operator identity is presented in the visible content.
Safety Assessment for ll-24.cc
This domain was flagged by 6 out of 91 security engines at the time of this scan, with several classifying it as phishing or malicious. In addition, multiple web-classification sources labeled the site as phishing, suspicious content, or drugs-related. While one malware scan did not detect malicious files on the sampled page, that result does not outweigh the broader reputation signals, especially where several independent engines raised concerns.
Blacklist and threat-database results were mixed rather than fully clean at the time of this scan. Major content-malice checks shown here did not detect a threat, but one blacklist provider listed the domain with a generic suspicious designation. The page itself is sparse, relies heavily on off-site messaging links, and does not provide the kind of transparent business information typically expected from a legitimate public-facing service.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL certificate and is served through Cloudflare infrastructure, with hosting resolved to an IP address associated with Cloudflare in Canada. Nameservers also point to Cloudflare, indicating the domain is using that provider for DNS and reverse-proxy services. DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from DNSSEC validation.
From a technical standpoint, the visible page is lightweight and references common third-party resources such as a JavaScript library CDN, Google Fonts, and external messaging platforms. No malicious files were flagged in the limited file scan provided, but the domain’s reputation signals and minimal on-site transparency remain the more notable concerns at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?