login.borrowlly[.]com
Category: Finance & Banking
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of login.borrowlly[.]com
This domain appears to be a login portal associated with Borrowly, based on the branding shown in the screenshot and the subdomain structure login.borrowlly[.]com. The page presents a minimal sign-in form asking for a phone number and the last four digits of a Social Security number, which suggests it may be intended for customer account access related to a lending, financing, or account-management service.
The footer references my.borrowlly.com and includes links to privacy policy, terms of service, SMS terms, and unsubscribe options, which indicates the page may be part of a broader customer communications or account-verification workflow. Based on the available content, this appears to be a financial-services-related login page rather than a general informational website.
Safety Assessment for login.borrowlly[.]com
At the time of this scan, no malware detections were reported by 0 out of 92 security engines, and the domain was not listed by the checked blacklist and threat-database sources. External-link analysis also did not identify any outbound links, referenced domains, or iframes, which reduces some common exposure points for malicious redirects or third-party abuse.
That said, there are still some cautionary signals. The domain is relatively new at about 91 days old, has no established popularity ranking, and one malware scanner produced a low-confidence suspicious verdict on the main page without naming a specific malware family or showing corroboration from other engines. In addition, the page requests sensitive personal information, including the last four digits of an SSN, so visitors should exercise normal caution and verify they intended to access this service through an official channel.
Based on available scan data, no confirmed threats were detected at the time of this scan, but the combination of a young domain, limited reputation history, and a generic suspicious heuristic means some risk cannot be ruled out.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate that was active at the time of scanning. It appears to be served by nginx from an IP hosted with a major data-center provider in Ashburn, United States. The protocol details were not fully identified in the scan results.
DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from that additional integrity layer. No malicious external resources or iframe inclusions were observed in the provided scan data. The main technical concerns are the domain's recent registration date and the single-page login design collecting sensitive identifiers, rather than any strong infrastructure-level indicator of compromise.
Share your experience with this website. Was it safe? Did you encounter any issues?