u-berxpress.com
Category: Suspicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of u-berxpress.com
The website appears to present itself as a landing page for the Uber mobile application, using the Uber name, logo styling, and ride-hailing imagery. The page shown in the scan is very minimal and focuses on a single call to action: downloading an app, with promotional wording such as offering one free ride.
Based on the domain name, page title, and screenshot, this site may be attempting to resemble the official online presence of Uber, the well-known transportation platform. However, the domain u-berxpress.com does not appear to match Uber's primary brand domain structure, and the page provides very limited company, product, or legal information beyond branding elements and a download prompt.
The operator is not clearly identified on the page in a way that can be independently verified from the scan data. Although the footer references Uber-related branding, the available evidence suggests this may be an unofficial site rather than a clearly authenticated corporate property.
Safety Assessment for u-berxpress.com
Several security signals raise concerns at the time of this scan. The domain was flagged by 8 out of 91 security engines, with multiple detections describing the site as phishing or malicious. In addition, the domain name closely resembles the Uber brand while using a different domain structure, and the screenshot shows Uber branding paired with an app download prompt. That combination may indicate a look-alike site intended to imitate a well-known service.
Other signals are mixed. A malware scan did not detect flagged files during this specific crawl, and major content-focused threat databases listed in the scan were clean at the time of review. However, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting. More importantly, the domain is only 15 days old, has no established traffic ranking, and links to an external download resource on a different domain, which may increase risk for visitors.
Based on these findings, this website may pose potential risks to visitors. The combination of multi-engine phishing detections, very recent registration, brand resemblance, and an off-domain download link suggests elevated caution is warranted at the time of this scan.
Technical Description
The site uses a valid Let's Encrypt SSL certificate expiring in October 2026 and is hosted on an nginx/1.24.0 (Ubuntu) server at IP address 94.26.90.68, geolocated to Frankfurt am Main, Germany, with hosting attributed to Dedik Services Limited. Nameservers are provided through Cloudflare, and DNSSEC appears to be unsigned.
From a technical perspective, HTTPS is present, but that alone does not verify legitimacy. The scan also indicates a download path involving an external domain rather than keeping all assets and downloads on the same branded domain, which may be a security concern in context. The domain's very recent creation date and lack of DNSSEC add to the overall uncertainty, although they are not conclusive by themselves.
Share your experience with this website. Was it safe? Did you encounter any issues?