subscriber-meta.invoice-ads-manager[.]com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of subscriber-meta.invoice-ads-manager[.]com
The domain subscriber-meta.invoice-ads-manager[.]com appears to be a highly specific subdomain rather than a primary public-facing website. Based on its naming pattern, it may be intended to imitate or reference advertising, billing, account management, or subscriber-related functions associated with a larger platform. The use of terms such as "subscriber," "meta," "invoice," and "ads manager" could suggest an attempt to resemble a business or advertising portal.
There is no clear evidence in the provided scan data that this is a legitimate standalone service operated by a recognized organization. The domain is very newly registered, has no established popularity ranking, and does not present identifiable branding or business context in the available data. Based on the domain structure alone, it may be designed for targeted campaign use, account-themed messaging, or credential collection rather than for a normal consumer website experience.
Safety Assessment for subscriber-meta.invoice-ads-manager[.]com
This domain shows multiple risk indicators at the time of this scan. It was flagged by 23 out of 92 security engines, with many of those detections classifying it as phishing or otherwise malicious. While one malware scan did not identify malicious files on the sampled content, that result does not outweigh the broader multi-engine consensus, especially for a newly created domain that may be used for deceptive login or account-related lures rather than traditional malware delivery.
Additional context increases concern. The domain is only 11 days old, has no known traffic ranking, uses an invalid or missing SSL/TLS configuration, and its naming closely resembles business and advertising account terminology that could be used to mislead recipients. Although major blacklist databases included in this scan did not list it at the time checked, phishing infrastructure can appear and disappear quickly, and newly deployed look-alike domains may not yet be fully reflected in all blocklists.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain was observed on infrastructure associated with Cloudflare, with the resolved IP address 162.159.140.98 and hosting geolocated to Toronto, Canada. The domain is very new, registered through Gransy, s.r.o., and uses nameservers from the same provider. DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from DNSSEC validation.
A notable technical concern is that SSL/TLS appears invalid or missing, with no confirmed certificate details or protocol information available. For any site that may request account, billing, or login information, absent or broken HTTPS materially increases risk. Combined with the young domain age and strong phishing-related detection consensus, the technical profile appears consistent with disposable or short-lived campaign infrastructure.
Share your experience with this website. Was it safe? Did you encounter any issues?