cobalink[.]xyz
Category: Suspicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of cobalink[.]xyz
cobalink[.]xyz appears to be a URL shortening platform branded as "CobaLink." The page title and visible Indonesian-language text suggest it offers users a way to create shortened links, with messaging that emphasizes simplicity, speed, analytics, security, and free access. The homepage screenshot shows account sign-up and login options using Google or email, which is consistent with a web-based link management service.
Based on the domain branding and page content, the site appears to target Indonesian-speaking users looking for a link-shortening or link-sharing tool. No clear operator identity is visible in the provided scan data or screenshot, so ownership cannot be independently confirmed from the available information alone.
Safety Assessment for cobalink[.]xyz
The scan results are mixed. On one hand, 3 out of 94 security engines flagged the domain with suspicious or phishing-related classifications, and multiple web-classification sources associated it with fraud-related categories. On the other hand, the malware scan did not identify malicious files, no flagged external links were reported in the sampled content, and the domain was not listed on the checked blacklist databases at the time of this scan.
Context also matters here: this is a relatively young domain with no Tranco ranking, which can increase uncertainty because newer and less-established domains have less reputation history. In addition, URL shortener services can sometimes be abused by third parties to obscure destination links, even when the platform itself presents as a legitimate tool. That does not prove harmful intent by the operator, but it does raise the need for caution when interacting with shortened URLs generated through such services.
Based on the combination of limited detections, clean malware findings, and fraud-related categorization by some security sources, this website may present a moderate level of risk and would merit caution, especially when following links created through it. Based on available scan data, no direct malware threats were detected on the sampled page at the time of this scan, but some indicators suggest potential abuse risk.
Technical Description
The domain uses a valid SSL/TLS certificate issued by a mainstream certificate authority, and traffic appears to be routed through Cloudflare infrastructure. The server IP resolves to Cloudflare hosting in Toronto, Canada, and the web server is reported as Cloudflare. Nameservers are also on Cloudflare, which is common for performance and DDoS protection.
From a domain-security perspective, DNSSEC appears to be unsigned, which means DNS responses do not benefit from DNSSEC validation. The domain is relatively new, registered for multiple years through a mainstream registrar. No iframe-based issues or flagged outbound references were identified in the provided scan sample, though the limited sample size means this should be treated as a point-in-time observation.
Share your experience with this website. Was it safe? Did you encounter any issues?