yahoo.hiddenspots.dev
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of yahoo.hiddenspots.dev
The domain yahoo.hiddenspots.dev appears to be a subdomain under hiddenspots.dev rather than an official Yahoo-owned web property. Based on the naming pattern alone, it may be intended to reference or resemble the Yahoo brand, but the available scan data does not indicate a legitimate relationship with Yahoo. No public traffic ranking was provided, and the domain is relatively new, which can make independent reputation assessment more limited.
From the available metadata, this appears to be a hosted web endpoint on cloud infrastructure rather than a well-established consumer website with a clear public identity. The use of a brand-like subdomain on an unrelated parent domain may be consistent with a temporary landing page, test deployment, or potentially a look-alike setup. Based on the domain structure and phishing-related detections, the most appropriate classification is a phishing-related web property rather than a mainstream content or business site.
Safety Assessment for yahoo.hiddenspots.dev
Several security signals indicate elevated risk at the time of this scan. The domain was flagged by 6 out of 91 security engines, with multiple detections specifically identifying phishing-related behavior. In addition, one threat-database check reported a malicious listing, and the domain's IP address appears on one mail-reputation blocklist. While a DNS-based mail-reputation listing is a weaker signal than direct website-malice detections, it still adds some caution when viewed alongside the phishing flags.
The domain name also closely resembles the Yahoo brand while being hosted on an unrelated parent domain, which may indicate a look-alike setup intended to confuse visitors. The domain is very new and has no established traffic ranking, both of which are common risk factors for short-lived deceptive sites. Although the malware scan did not identify flagged files in the limited content checked, that does not outweigh the broader phishing-related detections and naming concerns. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate with expiry listed as 2027-01-01, which indicates HTTPS was configured at the time of scanning. It appears to be served by nginx/1.24.0 on Ubuntu and hosted on Google Cloud infrastructure in Brussels, Belgium, using Cloudflare nameservers. DNSSEC is not enabled, as the domain is unsigned.
From a security posture perspective, the main concerns are reputational rather than transport-layer issues. The infrastructure itself appears standard, but the young domain age, lack of DNSSEC, phishing-related detections from multiple security engines, and a mail-reputation blocklist hit collectively suggest caution is warranted.
Share your experience with this website. Was it safe? Did you encounter any issues?