rationvideo.empirewaterfirerestoration.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of rationvideo.empirewaterfirerestoration.com
This domain appears to be a subdomain of empirewaterfirerestoration.com, which by name suggests a business related to water damage, fire damage, or property restoration services. The specific subdomain label "rationvideo" does not clearly match that apparent business purpose, which may indicate a temporary campaign page, a misconfigured subdomain, or content unrelated to the parent domain's main activity.
Based on the available scan context, the page itself does not appear to present a normal branded business website. The observed resources are largely error-handling and challenge pages served through a content-delivery and protection provider, which may mean the site was unavailable, restricted, or behind an anti-bot interstitial at the time of the scan. Because of that, the visible content and operator identity cannot be fully confirmed from this scan alone.
Safety Assessment for rationvideo.empirewaterfirerestoration.com
Multiple security engines flagged this URL at the time of the scan, with 11 out of 91 detections and most of those detections describing phishing-related activity. That level of multi-engine agreement is a meaningful risk signal, especially when the domain is relatively new, not ranked for notable traffic, and uses an unusual subdomain string that does not obviously align with the apparent restoration-services theme of the parent domain.
At the same time, some other checks were less conclusive: the malware file scan did not detect flagged files, and major content-malice blacklist databases included in the scan were reported clean at that moment. However, the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal than phishing detections but still adds some caution. Taken together, the phishing-oriented engine consensus outweighs the clean file scan here. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served through Cloudflare infrastructure using a valid TLS certificate issued by Google Trust Services, with certificate expiry shown as 2026-11-23. The server IP resolved to 188.114.97.2 in Toronto, Canada, and the nameservers also point to Cloudflare-managed DNS. DNSSEC was reported as unsigned.
The fetched resources suggest the page may have been showing Cloudflare error or challenge-related content rather than a normal application page during the scan. While a valid certificate and major CDN hosting can support legitimate sites, they do not by themselves reduce phishing risk when multiple security engines are flagging the URL.
Share your experience with this website. Was it safe? Did you encounter any issues?