ppp63.028426.com
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ppp63.028426.com
The domain ppp63.028426.com appears to host a phishing-awareness landing page rather than a conventional public website. Based on the screenshot, the page displays a message stating that the visitor reached an "authorized phishing simulation" run by an organization, followed by educational content about spear phishing, suspicious email cues, and reporting procedures. This suggests the site may be part of a security training or internal awareness campaign.
The domain structure is highly numeric and subdomain-based, which is commonly seen in campaign-specific infrastructure used for email testing, tracking, or training portals rather than branded consumer-facing services. While the registrar and long registration history indicate established domain management, the visible content appears focused on simulated phishing education for employees or program participants rather than general information technology services for the public.
Safety Assessment for ppp63.028426.com
Scan results are mixed. At the time of this scan, 12 out of 91 security engines flagged the URL, with detections broadly describing phishing, malware, or suspicious activity. In contrast, the page content shown in the screenshot appears to be a post-click training page for an authorized phishing simulation, which can sometimes resemble real phishing infrastructure closely enough to trigger automated detections. One blacklist source also listed the domain, while several other blacklist and threat-database checks were clean.
Additional context somewhat reduces uncertainty: the domain is about 9 years old, uses a valid TLS certificate, and the malware scan provided here did not identify malicious files, external links, or iframe activity at the time of analysis. However, the very low trust score provided in the scan and the multi-engine phishing-related detections mean caution is still warranted, especially because phishing-simulation domains can be difficult to distinguish from live phishing infrastructure without organizational context.
Based on these findings, this website may pose potential risks for general visitors, although the visible page appears consistent with an internal phishing-simulation or security-awareness campaign at the time of this scan.
Technical Description
The domain uses a valid Let's Encrypt SSL/TLS certificate with expiry listed as 2026-08-12, which indicates encrypted HTTPS connectivity was available at the time of testing. It resolves to an AWS EC2 IP address in Ashburn, United States, and uses AWS nameservers. The web server software and negotiated protocol were not identified in the provided scan data.
DNSSEC appears to be unsigned, so DNS responses may not benefit from DNSSEC validation. No malicious files, external links, referenced domains, or iframes were identified by the supplied malware scan, which is a limited positive signal. Even so, infrastructure hosted on major cloud providers can be used for both legitimate training systems and abusive campaigns, so hosting alone should not be treated as a trust indicator.
Share your experience with this website. Was it safe? Did you encounter any issues?