phantextrr.info
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of phantextrr.info
phantextrr.info appears to host a very basic WordPress site using default template content. The visible homepage shows the generic title "My Blog," the standard "Hello world!" starter post, and default navigation and footer elements associated with a fresh WordPress installation rather than a developed business or editorial website.
Based on the page metadata, URL structure, and screenshot, the site appears to be an undeveloped or minimally configured blog rather than an established service. No clear operator identity, company information, or stated purpose is visible from the provided scan data, and the domain name itself does not clearly correspond to a known brand, organization, or publication.
Safety Assessment for phantextrr.info
The scan results show mixed signals at the time of this scan. Two out of 91 security engines flagged the domain, including phishing-related categorization from multiple web-classification sources, while malware scanning of the site content did not identify malicious files and major blacklist databases were reported as clean. This combination can occur with newly created domains that have limited reputation history or with sites that have been reported for suspicious behavior without hosting detectable malware payloads.
There are additional cautionary indicators beyond the engine detections. The domain is only 12 days old, has no established traffic ranking, and the visible content is a default WordPress placeholder page with little trust-building information. That does not prove harmful intent, but it does reduce confidence because very new, low-content domains are commonly used for short-lived phishing or fraud campaigns.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate and is hosted on an Apache server at IP address 162.241.85.94, associated with Unified Layer in Los Angeles, United States. The nameservers point to webhostbox.net infrastructure, and DNSSEC is not enabled, which is common but means DNS responses are not additionally protected by DNSSEC validation.
From a technical standpoint, the site appears to be a standard WordPress deployment with default pages, feeds, embeds, and common third-party resources such as Google Fonts and Gravatar. No malicious files were detected in the provided malware scan, but the combination of a very new domain, unsigned DNSSEC status, and minimal default content may warrant extra caution at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?