notboc.xyz
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of notboc.xyz
The domain notboc.xyz appears to be a very recently registered website with minimal publicly visible metadata at the time of this scan. The page title and meta description were empty, and the scan did not identify external links, referenced domains, or embedded iframes, which suggests the site may be sparse, transient, or configured with very limited visible content.
Based on the domain name alone, there is no clear indication of a legitimate brand, organization, or service being operated here. The site uses a .xyz extension and is hosted behind a content-delivery and reverse-proxy service, which is common for both legitimate and questionable websites. Available scan data does not identify a clear operator or business purpose for the domain.
Safety Assessment for notboc.xyz
Multiple security engines flagged this domain at the time of the scan, with detections including phishing, malware, and suspicious classifications. That level of multi-engine agreement is a meaningful warning sign, especially because the domain is newly registered and does not appear to have an established traffic presence. While one malware scan reported no flagged files, that result was limited and does not outweigh the broader reputation signals.
Blacklist and threat-database checks did not show listings in the major content-malice databases that were queried, and the domain's IP address was not listed on the checked mail-reputation blocklists. Even so, the concentration of phishing- and malware-related detections across multiple security engines suggests the site may pose potential risks to visitors at the time of this scan.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site presented a valid SSL/TLS certificate issued by a mainstream certificate authority, with expiration in January 2027. It is hosted behind Cloudflare infrastructure on an IP address geolocated to Canada, and the nameservers also point to Cloudflare. This setup can improve availability and conceal origin-server details, but it does not by itself indicate legitimacy.
DNSSEC appears to be unsigned, which means DNS responses may lack an additional layer of authenticity protection. The domain is only about four months old, which is a modest technical risk factor because newly registered domains are more commonly associated with short-lived abuse than long-established ones.
Share your experience with this website. Was it safe? Did you encounter any issues?