Is ppdd19.plaifrdcikf.shop legit or a scam?
Malicious subdomain on a blacklisted parent domain, sinkholed by threat intelligence and flagged by Forcepoint and Seclookup.
These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.
Analysis Summary
Critical risk detected
2 of 92 antivirus engines flag this page. Multiple independent checks — antivirus engines, browser safety blocklists, and threat databases — flagged this site. Don't enter personal information, deposit money, or download files.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →
Visual Screenshot Analysis
We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.
Visual red flags detected in the screenshot
The page displays a standard nginx 403 Forbidden response; no scam indicators are visible and no meaningful content can be assessed.
What our vision model saw
1 signalPage renders a generic nginx 403 Forbidden error page with no functional content
MT Intelligence
The subdomain ppdd19.plaifrdcikf.shop is confirmed malicious by independent threat feeds and listed as sinkholed on urlquery.net, indicating active malware infrastructure. Forcepoint ThreatSeeker and Seclookup both flag it as malicious. The parent domain plaifrdcikf.shop carries extremely low trust scores (1–13/100) and is blacklisted by 9 security providers including CyRadar, Forcepoint, and Seclookup. The domain was registered only 10 months ago via Dynadot, and similar subdomains appear in malware reports alongside gambling and streaming fraud. The page itself renders a 403 Forbidden error, consistent with sinkholed or access-restricted malicious infrastructure. No legitimate business presence, user reviews, or complaints exist — only threat-feed detections and blacklist entries.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for ppdd19.plaifrdcikf.shop, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- Domain plaifrdcikf.shop registered August 27-28, 2025 (approx. 10 months old as of June 2026) with Dynadot Inc registrar
- Subdomain ppdd19.plaifrdcikf.shop flagged as malicious by multiple threat feeds including Hagezi Threat Feed and listed as sinkholed on urlquery.net reports
- Parent domain plaifrdcikf.shop has low trust scores on Gridinsoft (1/100 to 13/100) and is blacklisted by 9 security providers including ADMINUSLabs, alphaMountain.ai, CRDF, CyRadar, Forcepoint, Lionic, Seclookup
- Hosted on Cloudflare (IPs incl. 104.21.5.133, 172.67.133.124); proxied CDN; SSL certificate valid but automated scans show no public content/reviews
- Similar subdomains (e.g. ppdd18.plaifrdcikf.shop, d13.plaifrdcikf.shop) appear in urlquery.net malware/suspicious reports alongside gambling/sports streaming or other potentially malicious sites
- No user reviews, complaints, or business details found on Trustpilot, ScamAdviser, or major forums; appears in Semrush traffic data linked to certain .com gambling-related sites
- VirusTotal domain page exists but no specific detection details available in public summaries
- Gridinsoftopen
"Plaifrdcikf.shop has a very low trust score of 13/100 ... classified as Suspicious Website based on 9 blacklist detections and no established public user-review history."
- Gridinsoftopen
"Ppdd18.plaifrdcikf.shop has a 9/100 trust score and is flagged as Suspicious Website."
- urlquery.netopen
"ppdd19.plaifrdcikf.shop , malicious. Sinkholed. ... Hagezi Threat Feed, ppdd19.plaifrdcikf.shop , malicious."
Registered August 27/28 2025 via Dynadot Inc; expires August 2026; ownership not publicly available
Threat-intelligence reports confirm ppdd19.plaifrdcikf.shop is malicious and sinkholed. The parent domain plaifrdcikf.shop is flagged as a suspicious website with a trust score of 1–13/100 and blacklisted by 9 security providers including CyRadar, Forcepoint, and Seclookup. Similar subdomains (ppdd18.plaifrdcikf.shop, d13.plaifrdcikf.shop) appear in malware reports. No user reviews, complaints, or legitimate business details were found on consumer-review sites or business-verification databases.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Domain & Encryption
Redirect Chain
- 1301http://ppdd19.plaifrdcikf.shop/
- 2403https://ppdd19.plaifrdcikf.shop/
Server Reputation
Avoid this site
Our automated review flagged enough risk that you should treat this site as unverified.
- Do not interact with ppdd19.plaifrdcikf.shop
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
- Verify the business through independent channels
Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.
- Never use irreversible payment methods
Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.
- OpenShare your experience
If you have additional context, drop a comment below or post on the MalwareTips forum.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review flags ppdd19.plaifrdcikf.shop as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
- No — ppdd19.plaifrdcikf.shop scored 14/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
- Yes. ppdd19.plaifrdcikf.shop presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 35 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- 2 out of 92 antivirus engines in our malware network flagged ppdd19.plaifrdcikf.shop as malicious or suspicious (2 outright malicious). Even one detection is a meaningful signal.
- No. ppdd19.plaifrdcikf.shop is not currently listed on the major browser blocklist feeds that modern browsers use.
- ppdd19.plaifrdcikf.shop resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- This is a permanent record of the scan run on June 15, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around ppdd19.plaifrdcikf.shop have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.