metroretail-stores.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of metroretail-stores.com
The domain metroretail-stores.com appears to present itself as a retail-related account portal under the name “METRORETAIL-STORES.” Based on the screenshot, the page is a simple login and sign-up interface asking for a mobile number and password, with very limited supporting content and no visible company details, product catalog, or explanatory text about the service.
The branding shown on the page resembles a “Metro” retail identity, which may suggest an attempt to look like a store, membership portal, or customer account system. However, based on the available page content, the operator is not clearly identified, and there is no visible evidence of standard business information such as an about page, contact details, legal notices, or corporate ownership disclosures.
Safety Assessment for metroretail-stores.com
This domain shows several notable risk indicators at the time of this scan. It was flagged by 16 out of 91 security engines, with multiple detections describing the site as phishing or otherwise malicious. In addition, the domain is very new at only 12 days old, is not ranked among widely visited sites, and the visible page is a credential-entry form requesting a mobile number and password with minimal surrounding context. These patterns are commonly associated with credential-harvesting pages.
Although the page delivered a valid HTTPS certificate and some blacklist checks did not report listings at the time of review, those signals do not outweigh the broader concerns here. The combination of multi-engine detections, a newly registered domain, unclear ownership, and a sparse login-focused interface materially increases risk. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS using a valid Let's Encrypt certificate expiring on 2026-08-21. It appears to be served by an nginx web server hosted on infrastructure associated with Alibaba Cloud in Hong Kong. DNSSEC was not enabled, and the domain uses share-dns nameservers.
From a technical standpoint, the malware scan summary did not identify malicious files on the small set of scanned resources, and no external links or iframes were observed in the provided scan data. However, the domain’s very recent registration, unsigned DNSSEC status, and the presence of a basic credential form on a newly created host may be considered cautionary indicators when viewed alongside the broader detection results.
Share your experience with this website. Was it safe? Did you encounter any issues?