xeffy-checker.click
Category: Suspicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of xeffy-checker.click
This website appears to present itself as a cryptocurrency-related eligibility checker for a project called "Xeffy." Based on the page title and visible content, it claims that a "Season 1" token airdrop has been completed and invites visitors to check whether they can claim XEF tokens. The design is a single-page promotional landing page with calls to action such as "Check Eligibility & Claim" and references to token distribution metrics.
The domain name xeffy-checker.click suggests a narrowly focused campaign or utility page rather than a long-established primary brand domain. The site appears to be aimed at users interested in crypto rewards, token distributions, or community incentive programs. No clear operator identity, company details, or organizational background are visible in the provided scan data, so ownership and legitimacy cannot be independently confirmed from the available information.
Safety Assessment for xeffy-checker.click
Several risk indicators are present at the time of this scan. The domain was flagged by 9 out of 91 security engines, with multiple detections describing the site as phishing or fraud-related. In addition, the domain is only 8 days old, has no established traffic ranking, and uses a promotional crypto-airdrop theme that is commonly associated with wallet-draining or credential-harvesting campaigns. While the malware scan did not detect malicious files in the limited sample examined, that does not rule out social-engineering or phishing risk.
Blacklist and threat-database checks were otherwise clean at the time of this scan, including major content-malice feeds and the checked DNS-based reputation lists. However, clean blacklist status on a newly registered domain does not necessarily remove concern, especially when multiple security engines already classify it as suspicious or phishing-related. The combination of recent registration, crypto claim messaging, and multi-engine phishing detections materially increases risk.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid SSL certificate issued by a mainstream certificate authority, and it appears to be proxied through Cloudflare infrastructure. The server IP resolves to Cloudflare hosting in Toronto, Canada, and the nameservers also point to Cloudflare. This setup is common for both legitimate and questionable sites, so it should not be treated as a trust signal by itself.
DNSSEC appears to be unsigned, which means DNS responses do not benefit from DNSSEC validation. The domain is very new, registered for a short initial term, and hosted behind a reverse-proxy service that obscures origin infrastructure. No malicious files were flagged in the limited file scan, but the broader concern here appears to be potential phishing or deceptive workflow rather than overt malware delivery.
Share your experience with this website. Was it safe? Did you encounter any issues?