site-1ft2ad0jn.godaddysites.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of site-1ft2ad0jn.godaddysites.com
This domain appears to be a page hosted on GoDaddy's website builder platform rather than a standalone branded domain. The visible content is in French and presents itself as an "Espace client" or customer login page, specifically prompting visitors to access "Mail d’Orange" and enter an Orange email address or mobile number along with a secret code.
Based on the page title, metadata, and screenshot, the site appears to imitate a telecommunications customer portal associated with the Orange brand. The page is very limited in scope and mainly consists of a login form, with little supporting company information, navigation, or independent branding beyond the Orange logo and text references.
The underlying operator is not clearly identified on the page itself. While the site is hosted under a godaddysites.com subdomain and uses GoDaddy infrastructure, that hosting arrangement does not by itself indicate any affiliation with the brand shown on the page.
Safety Assessment for site-1ft2ad0jn.godaddysites.com
Multiple independent security signals raise concern about this page at the time of this scan. It was flagged by 17 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related content. In addition, one threat database listing was present, and the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal but still worth noting.
The screenshot also shows a login page using Orange branding while operating from a generic godaddysites.com subdomain rather than an official brand domain. That mismatch may indicate brand impersonation or credential harvesting behavior. The page asks for account identifiers and a secret code, which is consistent with the kind of data-entry flow commonly seen on phishing pages.
Although the malware scan did not report confirmed malicious files and only showed a generic heuristic indicator, the broader reputation data and the visible content pattern are more significant in this case. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL certificate issued through GoDaddy, with expiry shown as 2027-01-09. A valid certificate helps encrypt traffic in transit, but it does not verify that the page is trustworthy or legitimately affiliated with the brand it displays. DNSSEC appears to be unsigned.
Infrastructure details indicate hosting through AWS Global Accelerator, with the web server identified as DPS/2.0.0-beta+sha-cb8eafb and nameservers on GoDaddy's SecureServer platform. The domain itself is relatively old, but because this is a hosted subdomain on a site-building platform, age alone may not reflect the age or legitimacy of the current page content.
Share your experience with this website. Was it safe? Did you encounter any issues?