gravywallet.deals
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of gravywallet.deals
The domain gravywallet.deals appears to present a promotional landing page centered on a "Get Paid For Your Screentime" offer. Based on the visible page content, it claims users can earn money by playing popular mobile games and offers separate buttons for Android and iPhone users. The page also references payout methods such as Google Wallet, Apple Wallet, Cash App, and wire transfers, suggesting it is designed as a lead-generation or reward-offer funnel rather than a full informational website.
The branding and structure appear minimal, with little visible company identification, ownership information, or supporting business context on the homepage. The domain name combines the terms "gravy," "wallet," and the ".deals" extension, which may indicate a marketing-oriented or incentive-based offer site. Based on available data, no clear operator identity is disclosed in the scan details provided.
Safety Assessment for gravywallet.deals
Several risk indicators are present at the time of this scan. The domain was flagged by 4 out of 91 security engines, with multiple classifications describing it as phishing or fraud-related. In addition, multiple web-classification providers categorized the site as phishing-related. While the malware scan did not detect malicious files and major threat databases checked here did not list the domain, phishing pages often rely on deceptive content and social-engineering tactics rather than downloadable malware.
The page design shown in the screenshot may raise additional concerns because it uses urgency cues such as an expiring offer timer, claims of instant payouts, and references to well-known platforms and apps in a simplified promotional layout. The domain is also very new, not ranked for notable traffic, and does not show clear business identity details in the provided scan data. Those factors do not prove abuse on their own, but they can increase uncertainty when combined with phishing-related detections.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate provider, and it is served through Cloudflare infrastructure on IP address 172.67.138.25. The nameservers also point to Cloudflare, indicating the site is using a reverse-proxy/CDN setup that can help with availability and basic transport encryption. The certificate was valid at the time of this scan, although the exact negotiated protocol version was not provided.
From a domain-security perspective, the domain is very new at 64 days old, uses the .deals extension, and has DNSSEC listed as unsigned. The site is hosted behind shared edge infrastructure, which is common and not inherently suspicious, but it can make origin attribution less transparent. No malicious files, flagged external links, or iframe-based threats were detected in the provided page scan.
Share your experience with this website. Was it safe? Did you encounter any issues?