ch-angenow[.]com
Category: Finance, Malicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ch-angenow[.]com
ch-angenow[.]com appears to present itself as a cryptocurrency-related website focused on ChangeNOW, using the page title "ChangeNOW | Swap & Exchange" and a meta description describing an in-depth review of crypto swap and exchange features. The screenshot shows branding centered around "ChangeNOW" with promotional claims about coin support, swap speed, and user counts, suggesting the site is either attempting to review, promote, or imitate a crypto exchange service.
Based on the domain structure, the site name closely resembles the well-known ChangeNOW brand but uses a different domain format with an inserted hyphen. That resemblance may cause confusion for visitors expecting the official service. The available data does not identify an established independent publisher or company behind this domain, and the site appears to be operating as a standalone crypto-themed page rather than a clearly attributable corporate or media property.
Safety Assessment for ch-angenow[.]com
Several risk indicators are present at the time of this scan. The domain was flagged by 5 out of 91 security engines, with multiple detections indicating phishing or suspicious behavior. In addition, web classification data associates the site with finance-related content and newly registered websites, and the domain itself closely resembles the ChangeNOW brand name, which may indicate a look-alike intended to attract users searching for that service.
At the same time, not all scan sources showed active threats. A malware scan of the fetched files did not detect malicious code in the sampled content, and the checked blacklist databases did not report listings at the time of this scan. However, the combination of a very new domain, lack of ranking, crypto-related branding, and multiple phishing-oriented detections materially raises concern even without file-based malware findings.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate, expiring on 2026-06-23. It is hosted on an nginx/1.28.2 web server at IP address 176.125.242.151, with hosting attributed to Alexhost SRL in Chisinau, Moldova. The domain uses Dynadot name servers and is currently configured without DNSSEC signing.
From a technical standpoint, the presence of TLS means traffic may be encrypted in transit, but that alone does not establish legitimacy. The domain is only 32 days old, is not ranked in Tranco, and uses unsigned DNS, which together provide limited trust signals. No malicious files or flagged external links were identified in the sampled scan, but the infrastructure profile and recent registration do not offset the phishing-related detections.
Share your experience with this website. Was it safe? Did you encounter any issues?