php-web-server--antijudas2323.replit.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of php-web-server--antijudas2323.replit.app
This domain appears to be a page hosted on Replit, a cloud development and app-hosting platform, rather than a standalone corporate website. The subdomain structure and page title suggest it may be a custom project deployment, and the visible content presents a Spanish-language prompt styled to resemble a Microsoft terms-update notice with a "Siguiente" button.
Based on the screenshot and metadata, the page does not appear to function as a typical informational or business website. Instead, it seems designed as a branded landing page that references Microsoft visually and textually, while being served from an unrelated replit.app subdomain. No clear operator identity, company details, or legitimate ownership indicators are visible from the provided scan data.
Safety Assessment for php-web-server--antijudas2323.replit.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 11 out of 91 security engines, with the detections largely classifying it as phishing. In addition, the page visually presents Microsoft branding on a third-party hosting subdomain that does not appear to belong to Microsoft, which may indicate an attempt to imitate a well-known brand and solicit user interaction under misleading pretenses.
Other scan components were less conclusive: the malware file scan did not detect malicious files, and major threat databases and blacklist checks were reported clean at the time of this scan. However, clean file-scan results do not outweigh a broad phishing consensus combined with a page design that appears to mimic a trusted brand on unrelated infrastructure.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Google Cloud infrastructure behind Google Frontend and uses a valid TLS certificate issued by Google Trust Services, with certificate expiry reported in October 2026. The server IP resolves to 34.117.33.233 in Kansas City, United States. DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from that additional integrity layer.
From a technical standpoint, the page loads a small set of local assets along with external resources from common content delivery domains and Replit infrastructure. No malicious files or flagged outbound links were reported by the malware scan, but the use of a hosted app subdomain to present branding associated with another company is a notable security concern independent of TLS validity.
Share your experience with this website. Was it safe? Did you encounter any issues?