xornavo.vu
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of xornavo.vu
The domain xornavo.vu currently appears to display a page styled to resemble Wikipedia's multilingual homepage, including encyclopedia branding, language links, and references to Wikimedia projects. Based on the screenshot, the site presents itself as an informational or reference-style website rather than a business, store, or service portal.
However, the domain name itself does not appear to have an obvious connection to the Wikimedia Foundation or Wikipedia's known official web presence. The available registration details are limited, the registrar is not disclosed in the scan data, and the domain is very newly registered. Based on the domain pattern and the page presentation, this website may be attempting to imitate a well-known informational platform rather than operating as an independently branded reference site.
Safety Assessment for xornavo.vu
Several security signals raise concerns at the time of this scan. The domain was flagged by 7 out of 91 security engines, with multiple classifications indicating phishing, malicious activity, or related fraud concerns. In addition, multiple web-classification providers categorized the site as phishing or fraud-related. While some blacklist and malware-file checks did not detect active payloads, those clean results do not outweigh the broader reputation signals and the suspicious presentation.
The screenshot shows a page that closely resembles Wikipedia, but it is hosted on an unrelated and very recently created domain. That kind of visual resemblance may indicate a look-alike page intended to mislead visitors, especially when combined with phishing-related detections and a domain age of only 26 days. The domain was not listed on the checked content-malice blocklists at the time of this scan, and no threats were detected in the limited file scan, but newly created phishing pages can sometimes appear before broader blocklist coverage catches up.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, with expiry shown as 2026-09-09. It is served through Cloudflare infrastructure on IP address 188.114.97.0, with the server identified as cloudflare and the hosting location reported as Toronto, Canada. A valid certificate indicates encrypted transport, but it does not by itself confirm legitimacy.
WHOIS and DNS details are sparse in the available scan data: the domain is only 26 days old, while registrar, nameserver, and DNSSEC information are listed as unknown. No flagged files, external links, or iframes were identified in the limited malware scan, but the combination of recent registration, limited ownership transparency, and phishing-related reputation detections may be considered technical risk indicators.
Share your experience with this website. Was it safe? Did you encounter any issues?