de-online-services.info
Category: Suspicious, Newly Registered
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of de-online-services.info
The domain "de-online-services.info" presents itself as an "Online-Services" contact/address-change form, and its homepage screenshot displays the logo, color scheme, and branding of Deutsche Rentenversicherung (the German federal public pension insurance agency). The page title "Kontaktformular" and the meta description reference a contact form where visitors select a topic and submit personal data such as name, phone number, email address, insurance number ("Versicherungsnummer"), and date of birth.
Deutsche Rentenversicherung is a well-known German government institution, and its legitimate online presence operates from official ".de" government-affiliated domains. A domain using the generic ".info" TLD combined with a hyphenated, generic-sounding name like "de-online-services" is not a domain pattern typically used by official German government agencies, which raises concerns about whether this site is authorized to use the Deutsche Rentenversicherung branding and to collect the personal and insurance data shown in its form fields.
Categorization data from multiple web-classification tools flags this domain as "newly registered" and "suspicious," with one classification service specifically labeling it under "Phishing and Other Frauds," while another maps its apparent content category to "government" - consistent with a page designed to imitate a government service.
Safety Assessment for de-online-services.info
At the time of this scan, no security engines out of 91 checked flagged this domain for malware, and it does not appear on any of the content-malice blacklists checked, including phishing and malware databases and mail-reputation blocklists (DNSBL checks also returned clean). A malware file scan of the site's hosted content likewise reported no flagged files.
However, several important contextual factors raise concern. The domain was registered only two days before this scan, and multiple independent web-classification engines have tagged it as "newly registered" and "suspicious," with one explicitly categorizing it under "Phishing and Other Frauds." The page content itself displays the visual branding of Deutsche Rentenversicherung (Germany's public pension insurance authority) and requests visitors to submit personal information - including name, contact details, insurance number, and date of birth - through a form hosted on a non-official, generic ".info" domain. This combination of brand-like presentation, a request for sensitive personal data, and a domain registered only days ago is a pattern frequently associated with phishing or impersonation attempts, even though automated malware scanners have not yet flagged the site.
Given the very young domain age, the suspicious classification from multiple reputation engines, and the apparent replication of a government agency's branding to collect personal data, this website may pose potential risks to visitors, particularly regarding the submission of personal or identifying information.
Technical Description
The site is hosted behind Cloudflare's infrastructure (IP 172.67.149.45, Toronto, Canada listed as the edge location) using Cloudflare nameservers, and secures traffic with a valid Let's Encrypt SSL/TLS certificate (expiring December 2026). DNSSEC is not enabled for the domain. The domain was registered on 2026-09-26 through NameSilo, LLC, making it only a few days old at the time of this scan, and is set to expire in one year - a short registration period often seen with disposable or short-lived campaign domains.
One recorded link URL references a Cloudflare challenge-platform path (cdn-cgi/challenge-platform), suggesting the site may be shielded by Cloudflare's bot-verification or anti-scraping mechanisms. No iframes were detected, and only a single external domain reference was found, none of which were flagged by the malware scan.
Share your experience with this website. Was it safe? Did you encounter any issues?