z9p3t6k1r8w4.cfd
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of z9p3t6k1r8w4.cfd
The domain z9p3t6k1r8w4.cfd appears to host a web login page styled as a Plesk Web Host Edition interface. Based on the screenshot and linked resources, the page presents username and password fields along with third-party sign-in icons, suggesting it is intended to collect account credentials or imitate a hosting control panel login experience.
The domain name itself is a random-looking string rather than a branded business or service name, and the site does not appear to identify a clear operator, company, or legitimate service owner. Its referenced assets point to Plesk-related documentation and resources, but the scanned domain is not an obvious official Plesk property based on the available data.
Multiple web-classification sources categorize the site as phishing or fraud-related, while one generic classifier labels it as technology. Taken together, the page appears to be a credential-oriented web property rather than a normal public-facing business website.
Safety Assessment for z9p3t6k1r8w4.cfd
This domain shows several high-risk indicators at the time of this scan. It was flagged by 23 out of 91 security engines, and multiple web-classification providers categorized it as phishing or fraud-related. In addition, one threat database listing was present, and the domain's IP address was listed on one mail-reputation blocklist. While a separate malware scan did not identify malicious files, its generic suspicious-object findings do not outweigh the broader multi-engine phishing consensus.
The page content also raises concern. The screenshot shows a login form branded to resemble a Plesk hosting panel, yet the domain uses a newly registered, random-looking name that does not appear connected to an official Plesk service. That mismatch may indicate an attempt to imitate a legitimate login portal and capture credentials from visitors.
The domain is only 16 days old and has no established traffic ranking, which further increases uncertainty. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate expiring on 2026-07-27, which means traffic to the page may be encrypted in transit. However, HTTPS alone does not verify the trustworthiness of the site's purpose or operator. The domain is hosted on IP address 91.238.163.161 with Enix Ltd in Fareham, United Kingdom, and the web server software was not identified from the available scan data.
WHOIS data indicates the domain was created on 2026-06-04 through DYNADOT LLC and is very new. DNSSEC appears to be unsigned, which is common but provides no additional DNS integrity protection. The combination of a very recent registration, random domain naming pattern, phishing-related detections, and a credential-harvesting style login page are the main technical concerns observed at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?