secure-bot[.]vip
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of secure-bot[.]vip
The domain secure-bot[.]vip appears to host a landing page styled to resemble a Telegram group or channel invitation. Based on the page title, visual layout, and branding elements shown in the screenshot, the site seems intended to prompt visitors to join a channel or download something associated with a messaging-platform-themed page.
The domain name itself does not clearly identify a known organization, and the site does not appear to present normal corporate, editorial, or service information. Instead, it looks like a single-purpose promotional or redirect-style page. The screenshot also suggests adult-oriented channel branding, with a profile labeled "Pervy," which may indicate the page is being used to funnel traffic toward adult-themed social or messaging content.
Safety Assessment for secure-bot[.]vip
This domain shows several risk indicators at the time of the scan. It was flagged by 9 out of 91 security engines, with multiple detections describing the site as phishing or malicious. In addition, one blacklist database listed the domain, and an external resource associated with the site was marked suspicious. Although a separate malware scan did not identify confirmed malicious files, the overall scan picture is mixed rather than clean.
There are also contextual concerns beyond the detections alone. The domain is only 4 days old, has no established popularity ranking, and presents a page that visually imitates a Telegram invitation flow rather than using an obvious official Telegram domain. That resemblance may increase the likelihood of misleading visitors, especially if the page is intended to encourage clicks, downloads, or account interaction.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate and is served through Cloudflare infrastructure, with Cloudflare nameservers and a Cloudflare-hosted IP address. TLS presence helps encrypt traffic in transit, but it does not by itself indicate legitimacy. DNSSEC appears to be unsigned, which means DNS responses may not benefit from that additional integrity protection.
From an infrastructure perspective, the setup is lightweight and common for newly created sites: recent registration through Dynadot, Cloudflare fronting, and minimal scanned content. The combination of very recent domain age, limited site depth, and multiple security-engine detections may be considered a technical risk signal at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?