rfefrgdgfddf.duckdns.org favicon

rfefrgdgfddf.duckdns.org

Category: Phishing

Scanned: Jul 18, 2026, 12:32 AM UTC · First seen: Jul 17, 2026 · Threat Engines: 19 / 91 · Times Scanned: 5
5 / 100 Trust Score Based on scan findings at the time of analysis
Potentially Dangerous
0 - High Risk50 - Moderate100 - No Threats
Fresh scan recommended
Last scanned 10 days ago - security status may have changed since then.
Not scanned has not been scanned yet. Hit Scan Now to check it.

Scans can take up to 5 minutes to complete. Please keep this tab open - we'll redirect you to the report when it's ready.

Failed
Scan unavailable
Scan failed
Protect yourself from potentially harmful websites
Combo Cleaner's real-time web protection module actively blocks access to scam, phishing & malware-infected websites.
★★★★★ 4.8 / 5 Recommended by PCrisk.com editors Windows · Mac · Android · iOS
Download Combo Cleaner Free scan · no signup

To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.

Screenshot of rfefrgdgfddf.duckdns.org Captured Jul 18, 2026
https://rfefrgdgfddf.duckdns.org
Screenshot of rfefrgdgfddf.duckdns.org
This website has been flagged as potentially harmful
Screenshot blurred for safety. Multiple security engines flagged potential threats at the time of scanning.
13 years (duckdns.org)
Not Ranked - This website does not appear in the Tranco top list
Flagged by 19 of 91 engines
✓ Valid (TLS)
Vantiva USA Shared Services Inc.
Buffalo, United States
Apache
Unknown
157.254.223.155
Domain & WHOIS Information
Registrar GANDI SAS
Registered April 12, 2013 (duckdns.org)
Expires April 12, 2029
Name Servers NS1.DUCKDNS.ORG
DNSSEC Unsigned
Hosting Vantiva USA Shared Services Inc.
This is a subdomain of duckdns.org. The WHOIS data above belongs to the parent domain, not to rfefrgdgfddf.duckdns.org. The actual creation date of this subdomain is unknown and could be much more recent than the parent.
Reputation & Threat Check 91 security engines checked
19
19 of 91 engines flagged this website Flagged by 19 security vendors at the time of scanning
Not flagged Flagged
Flagged by 19 of 91 engines
Direct Threat Database Sources
View detailed engine results on VirusTotal
File Scan Summary Powered by Quttera Engine
2 files scanned
No threats
2
Low Risk
0
Medium Risk
0
High Risk
0
No threats Low Risk Medium Risk High Risk
login.php.http-redirect 80 B No threats
rfefrgdgfddf.duckdns.org/index.html 65.5 KB No threats
External Links & Domains
32
External Links
3 Flagged
0
Iframes
Clean
2
Referenced Domains
1 Flagged
4
Flagged Resources
Detected
rfefrgdgfddf.duckdns.orgFlagged: Generic Malicious Object
http://rfefrgdgfddf.duckdns.org/assets/sprites/menu.03ff8b6dbdcdd37732bc.svg#ico_chevronRight_24Flagged: Generic Malicious Object
http://rfefrgdgfddf.duckdns.org/assets/sprites/menu.03ff8b6dbdcdd37732bc.svg#ico_help_24Flagged: Generic Malicious Object
http://rfefrgdgfddf.duckdns.org/assets/sprites/menu.03ff8b6dbdcdd37732bc.svg#ico_showPassword_24Flagged: Generic Malicious Object
http://rfefrgdgfddf.duckdns.org/assets/sprites/menu.03ff8b6dbdcdd37732bc.svg#ico_chevronRight_24Flagged: Generic Malicious Object
http://rfefrgdgfddf.duckdns.org/assets/sprites/menu.03ff8b6dbdcdd37732bc.svg#ico_help_24Flagged: Generic Malicious Object
http://rfefrgdgfddf.duckdns.org/assets/sprites/menu.03ff8b6dbdcdd37732bc.svg#ico_showPassword_24Flagged: Generic Malicious Object
https://www.postfinance.ch/Not flagged
https://www.postfinance.ch/ap/ra/ob/html/finance/home?loginNot flagged
https://www.postfinance.ch/ap/ra/ob/html/finance/home?login&amp%3Bp_spr_cd%3D1Not flagged
https://www.postfinance.ch/ap/ra/ob/html/finance/home?login&amp%3Bp_spr_cd%3D2Not flagged
https://www.postfinance.ch/ap/ra/ob/html/finance/home?login&amp%3Bp_spr_cd%3D3Not flagged
https://www.postfinance.ch/ap/ra/ob/html/finance/home?login&amp%3Bp_spr_cd%3D4Not flagged
https://www.postfinance.ch/cc/ob/html/styles-HOXAWD4H.cssNot flagged
https://www.postfinance.ch/cc/ok/lr#pflogoNot flagged
https://www.postfinance.ch/cc/ok/lr/assets/favicons/apple-icon-114x114.pngNot flagged
https://www.postfinance.ch/cc/ok/lr/assets/favicons/apple-icon-120x120.pngNot flagged
https://www.postfinance.ch/cc/ok/lr/assets/favicons/apple-icon-144x144.pngNot flagged
https://www.postfinance.ch/cc/ok/lr/assets/favicons/apple-icon-152x152.pngNot flagged
Show 17 more...
rfefrgdgfddf.duckdns.orgFlagged: Generic Malicious Object
www.postfinance.chNot flagged
rfefrgdgfddf.duckdns.org Overview

Description of rfefrgdgfddf.duckdns.org

This domain appears to host a login page styled to resemble PostFinance's e-finance portal. The page title, meta description, visible branding, and linked assets all reference PostFinance and online banking functions such as account login, password entry, and user identification.

However, the actual domain is a DuckDNS subdomain rather than an official PostFinance web address. Based on the available page content and domain structure, the site does not appear to be operated by PostFinance itself and instead may be presenting a copy or imitation of a financial login interface.

The combination of banking-themed content, credential-entry fields, and third-party branding on an unrelated hostname is commonly associated with credential-harvesting pages. Based on the available data, this site appears to target users seeking access to PostFinance online banking services.

Safety Assessment for rfefrgdgfddf.duckdns.org

Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 19 out of 91 security engines, with many classifying it as phishing or malicious, and it was also listed by a major threat database for social-engineering activity. In addition, another blacklist source reported a malicious-object listing, while the domain's IP address appeared on one mail-reputation blocklist; that DNS-based listing is a weaker signal on its own, but it adds to the overall caution here.

The page content further increases concern because it appears to imitate a financial login page for PostFinance while being hosted on an unrelated DuckDNS subdomain. That mismatch between the displayed brand and the actual hostname is a common sign of a look-alike credential collection page. The screenshot shows username, password, and identification fields, which may be intended to capture sensitive banking information from visitors.

Although the domain itself is old, the age of a dynamic DNS parent domain does not offset the stronger phishing indicators present in the page content and scan results. Based on these findings, this website may pose potential risks to visitors.

Technical Description

The site was reachable over HTTPS with a valid Let's Encrypt certificate that, at the time of this scan, was set to expire on 2026-10-14. It appears to be served by Apache from IP address 157.254.223.155, hosted by Vantiva USA Shared Services Inc. in Buffalo, United States. DNS uses DuckDNS nameservers, and DNSSEC appears to be unsigned.

From a security perspective, the presence of TLS should not be treated as evidence of legitimacy, since phishing pages commonly use valid certificates as well. The more notable concerns here are the use of a dynamic DNS subdomain for a banking-themed login page, the mismatch between the displayed PostFinance branding and the actual hostname, and the substantial number of phishing detections from security engines at the time of this scan.

HTTP Redirect Chain
302 https://rfefrgdgfddf.duckdns.org/
200 https://rfefrgdgfddf.duckdns.org/login.php
Website Insights
Not Ranked
Tranco Rank
Not in Top 1M
Visitors Unknown
Category: Phishing
Rank History (30 days)
No rank data available
1 cookie detected
Essential1
Analytics0
Advertising0
Social0
1 1st party cookie
0 3rd party (trackers)
Dispute This Score For website owners
Believe this score is inaccurate?
If you are the website owner and believe the scan results contain errors or false positives, you can submit a dispute for manual review. Our team typically responds within 1-2 business days.
You will be asked to verify your email before the dispute can be processed.
By submitting this form, you confirm that the information provided is accurate. Disputes are reviewed manually and results may take up to 48 hours to update.
One more step…
To submit your dispute for rfefrgdgfddf.duckdns.org, please click the verification link we just emailed you. Once verified, we'll review it within 1-2 business days.
This report was generated automatically and is provided for informational purposes only. Results are based on a point-in-time scan and may contain false positives or incomplete data. This does not constitute a security audit or certification. No vendor in the market can guarantee a 100% detection rate. If you believe this report is inaccurate, please submit a dispute.

Share your experience with this website. Was it safe? Did you encounter any issues?