xxooxoxixoi98xu9xioxuxishkjxkj-5q3lq.ondigitalocean.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of xxooxoxixoi98xu9xioxuxishkjxkj-5q3lq.ondigitalocean.app
This domain appears to be a hosted subdomain on a cloud application platform rather than a branded standalone website. Based on the page title, the random-looking subdomain string, and the screenshot content, the page appears to present a Japanese-language “help desk” or technical support themed interface that imitates a Windows security environment.
The visible content suggests the page is designed to display alarming security warnings, claim that sensitive information has been stolen, and urge visitors to call a phone number for support. That behavior is commonly associated with browser-based tech-support scam pages or phishing-style social engineering rather than a legitimate software vendor support portal. No clear evidence in the provided data indicates that the page is operated by Microsoft or another recognized official support organization.
Safety Assessment for xxooxoxixoi98xu9xioxuxishkjxkj-5q3lq.ondigitalocean.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 7 out of 91 security engines, with several classifying it as phishing or otherwise malicious, and it was also listed by a major threat database for social-engineering activity. In addition, the screenshot shows a fake-looking Windows security alert flow that pressures the visitor to call a support number, which is a common social-engineering pattern.
Although the malware scan did not detect malicious files in the limited set of scanned resources, that does not offset the stronger phishing-related indicators. The domain's IP address also appears on one mail-reputation blocklist, which is a weaker signal on its own, but here it sits alongside more significant phishing findings. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued by a mainstream certificate authority, and traffic appears to be served through Cloudflare infrastructure on IP address 172.66.0.96. Nameservers also point to Cloudflare, suggesting the site is fronted by a content delivery and reverse-proxy service. The domain is about six years old, which can sometimes indicate persistence, though age alone does not reduce the significance of phishing-related findings.
DNSSEC appears to be unsigned, which is not uncommon but means DNS responses do not benefit from that additional integrity layer. Hosting on a reputable cloud platform and using valid HTTPS do not by themselves establish legitimacy; in this case, the main technical concern is the apparent use of cloud-hosted infrastructure to deliver a page that resembles a deceptive support or phishing lure.
Share your experience with this website. Was it safe? Did you encounter any issues?