mauihost.qpon
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of mauihost.qpon
The domain mauihost.qpon appears to host a very minimal web directory rather than a finished public-facing website. The visible page shows a basic "Index of /" listing with links to an HTML file named "AdobeInstaller.html" and a "cgi-bin/" directory, which suggests the server may be exposing files directly instead of presenting a normal homepage. Based on the domain name, it may be intended to resemble a hosting-related service, but the current content does not provide clear branding, ownership details, or a stated business purpose.
Available classification data associates this domain with phishing or fraud-related categories, and another source labels it as a newly registered website. The lack of company information, contact details, and normal site content makes it difficult to verify who operates it or what legitimate service it is meant to provide. At the time of this scan, the site appears to function more like an open file index than a complete website.
Safety Assessment for mauihost.qpon
Several risk indicators were present at the time of this scan. The domain was flagged by 4 out of 91 security engines, and multiple web-classification providers associated it with phishing or fraud-related activity. In addition, the domain is only 1 day old, has no established traffic ranking, and the visible page exposes a directory listing with an installer-themed file name, which can be a concerning pattern when combined with phishing-related detections.
The malware scan did not identify malicious files in the small set of scanned items, and major content-focused threat databases listed here did not report active malware or phishing entries at the time of this scan. However, the domain's IP address is listed on one mail-reputation blocklist, and one additional blacklist source returned a generic malicious-object listing. Those signals are not conclusive on their own, but they add to the overall caution when viewed alongside the phishing detections and the domain's extremely recent registration.
Taken together, the combination of multi-engine phishing flags, very recent domain age, sparse site content, and exposed installer-related file naming suggests elevated risk. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate expiring on 2026-12-22, which indicates HTTPS has been configured, although the exact TLS protocol details were not available in the scan data. The server appears to run nginx on infrastructure hosted by Oracle Corporation in Ashburn, United States, with the domain resolving to IP address 50.6.202.214.
From a configuration standpoint, DNSSEC is not enabled, and the domain uses unusual nameservers under another .xyz domain rather than clearly branded provider nameservers. The most notable technical concern is not the certificate itself but the exposed directory index and accessible installer-themed file path, which may increase risk if the server is being used to distribute deceptive or unwanted content.
Share your experience with this website. Was it safe? Did you encounter any issues?