portal-billcare.higglnbothamfamilydental.com
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of portal-billcare.higglnbothamfamilydental.com
The domain portal-billcare.higglnbothamfamilydental.com appears to be a subdomain rather than a primary standalone website. Based on the naming pattern, it may be intended to look like a billing or account portal associated with a dental practice, while the visible page content presents a sign-in screen for a third-party email or productivity service.
The screenshot shows a login page branded as a mail access portal with options for email or mobile sign-in and several federated login buttons. This suggests the page may be used for account access or credential collection rather than for general informational content. Because the domain is newly registered and the branding shown on the page does not clearly match the domain name, the site’s purpose may warrant additional scrutiny.
Safety Assessment for portal-billcare.higglnbothamfamilydental.com
Scan results were mixed at the time of this scan. One security engine flagged the domain for spam-related concerns, while malware scanning did not detect malicious files and major threat databases did not report the domain as listed for phishing or malware distribution. That said, the domain is very new, has no established traffic ranking, and uses a login-focused page on a subdomain whose naming does not clearly align with the branding shown in the screenshot.
The page also appears to present a sign-in experience associated with a well-known email platform, but it is hosted on an unrelated domain. That resemblance may indicate a look-alike login page intended to imitate another service. Fresh credential-harvesting pages can sometimes have little or no broad detection coverage early on, so limited detections do not necessarily remove risk.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued by a mainstream certificate authority, and traffic appears to be routed through Cloudflare infrastructure. The server resolves to a Cloudflare IP address in Canada, and the web server is reported as Cloudflare. Nameservers also point to Cloudflare, which is commonly used for CDN, DNS, and reverse-proxy services.
DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from DNSSEC validation. The domain is only 36 days old, which is a notable risk factor for login-themed pages. The observed /cdn-cgi/challenge-platform path indicates Cloudflare challenge infrastructure is present, suggesting some access-control or bot-mitigation behavior on the site.
Share your experience with this website. Was it safe? Did you encounter any issues?