scriptapi.dev
Category: Malicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of scriptapi.dev
scriptapi.dev appears to be a developer- or API-oriented domain based on its name and the .dev extension, which is commonly used for software, tooling, and technical web services. Available classification data is mixed: one provider categorized it as technology, while several others associated it with malicious or malware-related activity at the time of this scan.
The domain is registered through a mainstream registrar and uses Cloudflare infrastructure and nameservers, which may indicate use of a content delivery and protection layer rather than direct origin hosting exposure. Based on the limited content signals provided here, the site may be intended to serve scripts, API resources, or web application components, but its exact business purpose and operator identity are not clearly established from the scan data alone.
Safety Assessment for scriptapi.dev
Security results for this domain show notable caution signals at the time of this scan. It was flagged by 13 out of 91 security engines, and multiple web-classification sources associated it with malware-related or malicious activity. At the same time, several major threat databases focused on phishing and malware distribution did not report active listings, which suggests the evidence is mixed rather than universally confirmed.
The supplemental malware scan reported no flagged files, but it did attach a generic malicious label to the domain and to a Cloudflare challenge URL. Generic heuristic findings can sometimes be lower-confidence than named malware detections, yet in this case they appear alongside a broader multi-engine consensus. Blacklist checks were mostly clean, although one additional provider listing was present, which adds some caution.
The domain is more than a year old and has a valid TLS certificate, which are mildly reassuring technical signals, but they do not outweigh the volume of reputation-based detections. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain uses Cloudflare nameservers and appears to be served through Cloudflare infrastructure on IP address 188.114.97.2, with hosting geolocated to Toronto, Canada. Its TLS certificate is valid and issued by Google Trust Services, with expiry in October 2026. DNSSEC appears to be unsigned, which is not uncommon but means DNS responses do not benefit from DNSSEC validation.
No direct malware-infected files were identified in the limited file scan provided, and no DNS-based mail-reputation blocklist hits were reported. However, the scan did identify a flagged Cloudflare challenge URL and the domain itself through generic malicious heuristics, and the stronger technical concern here is the relatively high number of reputation-engine detections rather than a specific server misconfiguration.
Share your experience with this website. Was it safe? Did you encounter any issues?