sankouh.pivac.com.mx
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of sankouh.pivac.com.mx
The domain sankouh.pivac.com.mx appears to be a subdomain hosted under pivac.com.mx rather than a standalone brand website. Based on the screenshot, it presents itself as a parcel-tracking or delivery-management page in German, using logistics-themed wording such as "Paketverfolgig" and offering delivery rescheduling dates along with a fee notice. The page layout, yellow branding, and postal-service styling suggest it is attempting to resemble a postal or courier service interface.
The content shown does not appear to match the underlying domain name, which is not obviously associated with a major shipping provider. The page also references external assets such as Google Fonts and includes a link to netflix.com, which does not appear directly related to parcel tracking. Available classification data includes both transportation-related labeling and multiple phishing-related categorizations, indicating that the site may be presenting logistics-themed content while being interpreted by several security systems as potentially deceptive.
Safety Assessment for sankouh.pivac.com.mx
Several security signals raise concerns about this domain at the time of the scan. It was flagged by 5 out of 91 security engines, and multiple web-classification providers categorized it as phishing or fraud-related. The screenshot also shows a delivery-problem and rescheduling-payment scenario, which is a common social-engineering pattern used to pressure visitors into entering personal or payment information.
Although some checks were clean at the time of the scan — including malware-file scanning, major threat-database checks, and DNS-based blacklist checks — those results do not outweigh the phishing-related detections and the suspicious page presentation. The domain is relatively old, which can sometimes reduce risk, but age alone does not rule out abuse, especially on a subdomain. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was using a valid Let's Encrypt SSL certificate at the time of the scan, expiring on 2026-11-20. It was hosted on IP address 195.250.27.45, reportedly behind an openresty/1.31.1.1 web server and infrastructure associated with WHG Hosting Services Ltd. The nameservers point to mysecurecloudhost.com, suggesting use of hosted infrastructure rather than a dedicated branded environment.
DNSSEC status was reported as unknown. No malicious files, flagged external links, or iframes were identified by the page-level malware scan at the time checked, but the mismatch between the domain structure and the postal-themed content remains a technical and contextual concern.
Share your experience with this website. Was it safe? Did you encounter any issues?