secure-site-editor--kevin1635.replit.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of secure-site-editor--kevin1635.replit.app
This domain appears to be a page hosted on the replit.app platform rather than an official standalone corporate website. Based on the page title and screenshot, it presents itself as a Microsoft Outlook sign-in page and asks visitors for email and password credentials.
The domain name does not appear to match Microsoft's official web properties, and the content shown is limited to a login form branded as Outlook. Based on the available page content, the site may be intended to imitate a webmail login experience rather than provide independent editorial, business, or consumer services.
Safety Assessment for secure-site-editor--kevin1635.replit.app
Several security signals indicate elevated risk at the time of this scan. The URL was flagged by 18 out of 91 security engines, with the detections largely classifying it as phishing or otherwise malicious. In addition, the screenshot shows a login page branded as Microsoft Outlook even though the site is hosted on a replit.app subdomain that does not appear to be an official Microsoft domain, which may indicate an attempt to collect account credentials by imitation.
Other signals are mixed but do not outweigh the phishing concerns. Malware scanning did not identify flagged files, and major threat databases checked here did not list the domain at the time of the scan. However, phishing pages often contain minimal code and may still appear clean in file-based scans, so a clean malware result does not by itself remove the risk suggested by the page content and multi-engine detections.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services and is served through Google Frontend infrastructure on Google Cloud, with the resolved IP located in Kansas City, United States. The domain uses Google-managed nameservers and the parent domain has been registered for several years, although this specific page is hosted as a subdomain on a shared application platform.
DNSSEC appears to be unsigned. No malicious files, external links, or iframes were identified in the provided scan data, but the combination of a credential-entry form, third-party hosting, and branding that appears unrelated to the displayed domain may be a significant security concern at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?