ytshop.pages[.]dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ytshop.pages[.]dev
The website appears to present itself as a Chinese-language news and media portal associated with CCTV Global. Its page title and meta description reference an overseas channel for cctv.com, and the screenshot shows a media-style homepage with navigation for news, culture, video, documentaries, live content, and language options. Based on the visible content, the site is designed to resemble a mainstream broadcast or state-media content hub rather than a personal page or simple landing page.
However, the domain itself is ytshop.pages[.]dev, which does not match the branding shown on the page. The pages.dev hostname is a general-purpose hosting platform commonly used for static sites and temporary deployments, so the mismatch between the displayed identity and the actual domain may be significant. Based on the available data, this page may be imitating or republishing content associated with a better-known media brand rather than operating from an official primary domain.
Safety Assessment for ytshop.pages[.]dev
Multiple independent signals raise concern about this website at the time of the scan. It was categorized by several web-classification providers as phishing or fraud-related, and 18 out of 91 security engines flagged the URL. In addition, one blacklist database listing was present, and a referenced script path on the same domain was identified as suspicious by a malware scan. Although one file-based scan reported no broadly flagged files, the overall detection pattern is not consistent with a low-risk site.
A notable concern is the mismatch between the domain name and the identity presented on the page. The site visually claims to be a CCTV Global property, but it is hosted on a pages.dev subdomain unrelated to the official brand shown in the screenshot. That kind of branding/domain inconsistency may indicate impersonation, deceptive mirroring, or a phishing setup intended to gain user trust.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate and is served through Cloudflare infrastructure, with hosting resolved to a Cloudflare IP in Canada. The certificate appears current, and the domain has been registered for several years, which can sometimes lend legitimacy but does not outweigh active threat indicators. The domain is not ranked in Tranco, suggesting limited mainstream traffic or visibility.
From a security posture perspective, DNSSEC is unsigned, and the site is hosted on a shared platform subdomain rather than a dedicated branded domain. The combination of shared-hosting deployment, domain/brand mismatch, phishing classifications, and a suspicious referenced script path are the main technical concerns observed at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?