paxwe.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of paxwe.com
The domain paxwe.com appears to host a login page styled to resemble a Microsoft account sign-in screen in Spanish, with the title "Iniciar sesión en tu cuenta Microsoft." The visible content shows Microsoft branding, a username/email input field, and account-access prompts, suggesting the page is presenting itself as an authentication portal rather than as an independent business or informational website.
Based on the domain name and page presentation, paxwe.com does not appear to be an official Microsoft-owned domain. The site seems to use externally hosted branding assets and common web libraries to imitate a familiar sign-in experience. No evidence in the provided scan data indicates a legitimate operator identity, corporate disclosure, or independent service purpose beyond the presented login interface.
Safety Assessment for paxwe.com
Multiple scan signals indicate elevated risk at the time of this scan. The domain was flagged by 17 out of 91 security engines, with many classifying it as phishing or malicious, and it was also listed by a major threat database for social-engineering activity. In addition, the page visually presents itself as a Microsoft login screen while operating from an unrelated domain, which may indicate an attempt to collect account credentials by impersonating a well-known service.
The domain is also very new, not ranked in major traffic listings, and one linked script on the site was generically flagged during malware analysis. A DNS-based mail-reputation blocklist listing was also present for the server IP; this is a weaker signal than phishing detections, but it adds some caution rather than offsetting the stronger findings. Although one malware scan reported the page as clean overall, the broader consensus across security engines and blacklist data points to a substantially higher level of concern.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate expiring in October 2026 and is served over HTTPS from an Apache web server at IP address 82.165.110.163, hosted in Essen, Germany. While valid TLS helps encrypt traffic in transit, it does not by itself indicate legitimacy, especially when the page content appears to imitate a third-party login portal.
The domain is approximately 103 days old, uses unsigned DNSSEC, and relies on unusual nameservers under testpphpcss.shop rather than infrastructure that would typically be associated with a major brand. The scan data also noted a flagged local script path (/telgm.js), which may warrant additional scrutiny. Taken together, the technical profile appears consistent with a recently created site using basic hosting and certificate setup.
Share your experience with this website. Was it safe? Did you encounter any issues?