php-3741bswi-passidch.wasmer[.]app
Category: Information Technology, Malicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of php-3741bswi-passidch.wasmer[.]app
This domain appears to be a subdomain hosted on the Wasmer app platform rather than a standalone branded website. The hostname structure, php-3741bswi-passidch.wasmer[.]app, looks auto-generated or campaign-specific, which is commonly seen with temporary app deployments, test instances, or disposable hosted pages. Available categorization data associates it with information technology and malicious or fraud-related activity.
At the time of this scan, the visible page did not present a normal service or application. Instead, it displayed an "App Disabled" notice stating that the domain had been disabled by the platform's Trust & Safety team and warning that visitors may have been targeted by a phishing attempt. Based on the screenshot and page metadata, the current content appears to be a platform-level takedown or disablement notice rather than an active end-user website.
Safety Assessment for php-3741bswi-passidch.wasmer[.]app
The strongest safety signals in this case are negative. The domain was flagged by 11 out of 92 security engines, with multiple scanners classifying it as phishing or malicious, and web-classification sources also associated it with phishing and fraud-related activity. In addition, the live page shown in the screenshot states that the app has been disabled by the hosting platform's Trust & Safety team and explicitly warns that redirected visitors may have been targets of a phishing attempt.
There are a few neutral signals: the malware file scan did not identify malicious files in the limited content scanned, and major blacklist checks shown here were clean at the time of this scan. However, those clean blacklist results do not outweigh the combination of multi-engine phishing detections, the very low trust score, the lack of meaningful legitimate site content, and the hosting platform's own disablement message.
Based on these findings, this website may pose potential risks to visitors at the time of this scan.
Technical Description
The domain uses a valid Let's Encrypt TLS certificate, with certificate expiry listed in mid-2026. It resolves to an IP in Paris, France, hosted by ONLINE, and uses Wasmer-related nameservers. DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from that additional integrity layer.
From an infrastructure perspective, this appears to be a hosted app subdomain rather than a dedicated business website. The current page state indicates the application has been disabled by the platform, which is a notable security-related signal. While the certificate itself is valid, HTTPS alone should not be treated as evidence of legitimacy.
Share your experience with this website. Was it safe? Did you encounter any issues?