unitop-shop.shop
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of unitop-shop.shop
The domain unitop-shop.shop appears to present itself as a login portal for a service branded "UNITOP." Based on the visible page text, it claims to be "the largest intermediary e-commerce platform in the Philippines" and offers a simple sign-in form with registration and customer-service links. The site does not appear to provide broader company details, product listings, or standard storefront navigation on the captured page.
From the domain structure, this appears to be an e-commerce-related or account-access website rather than a general informational page. The use of a brand-style name combined with the generic ".shop" extension may indicate a commercial or marketplace-oriented purpose, but based on the available screenshot, the page is primarily a credential-entry interface. No clear operator identity, corporate ownership details, or verifiable business information are evident from the provided scan data.
Safety Assessment for unitop-shop.shop
Several risk indicators are present at the time of this scan. The domain was flagged by 7 out of 91 security engines, with multiple scanners classifying it as phishing or otherwise suspicious. In addition, the site is very new at only 71 days old, has no established traffic ranking, and the visible page is a minimal login screen requesting a six-digit identifier and password while offering little supporting context about the organization behind it. That combination can be consistent with credential-harvesting or impersonation-style activity.
At the same time, some checks did not identify active malware distribution: the malware scan reported no flagged files, and major threat-database and blacklist checks were clean at the time of this scan. However, clean malware and blacklist results do not outweigh a multi-engine phishing signal when the page itself appears focused on collecting login credentials and provides limited transparency. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate, which means traffic to the page is encrypted in transit. It is hosted behind Cloudflare infrastructure on IP address 172.67.144.114, with Cloudflare nameservers and a reported hosting location in Toronto, Canada. The web server is identified as Cloudflare, which can obscure the origin server and is commonly used by both legitimate and questionable sites.
DNSSEC appears to be unsigned, so there is no additional DNS integrity protection indicated in the scan data. The domain is recently registered and uses a generic commercial TLD, while the scan did not provide a confirmed application protocol beyond the presence of HTTPS. No malicious files or external links were detected in the limited crawl, but the sparse page structure and phishing-related engine detections remain notable concerns.
Share your experience with this website. Was it safe? Did you encounter any issues?