elster.de-189980.cc
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of elster.de-189980.cc
The domain elster.de-189980.cc appears to be a newly registered website using a name that resembles the German "elster.de" brand and tax-related online identity. Based on the domain structure alone, it may be attempting to reference or imitate a known service rather than operate under an established official domain. The scan data does not provide evidence of a developed public-facing website beyond infrastructure responses.
Safety Assessment for elster.de-189980.cc
At the time of this scan, no malware detections were reported by 0 out of 92 security engines, and the available blacklist and threat-database checks were also clean. The malware scan likewise did not identify flagged files, malicious external links, or suspicious iframes in the sampled content. However, these clean results should be interpreted cautiously because the domain is extremely new and appears to have little or no established web presence yet.
A notable concern is that the domain closely resembles "elster.de" while using an added suffix and a different top-level domain, which may indicate a look-alike setup. Newly created look-alike domains can sometimes remain unflagged in early scans simply because they have not been widely analyzed yet. The page resources shown also suggest a Cloudflare error or challenge page rather than a mature, functioning website. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is behind Cloudflare and resolves to IP address 172.67.174.121, with Cloudflare nameservers and a valid Let's Encrypt SSL certificate expiring on 2027-01-06. DNSSEC appears to be unsigned. The web server is identified as Cloudflare, and the observed resources include Cloudflare challenge and error-page assets.
From a technical-risk perspective, the strongest concern is not the TLS setup but the domain profile: it was created very recently, has no ranking data, and uses a name pattern that resembles a known domain. That combination can be consistent with disposable or impersonation-oriented infrastructure, although the scan did not detect active malware at the time checked.
Share your experience with this website. Was it safe? Did you encounter any issues?