invoice-cbase[.]com
Category: Malicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of invoice-cbase[.]com
The domain invoice-cbase[.]com appears to host a page styled as a cryptocurrency payment receipt or payment-claim interface. Based on the page title, visible branding, and screenshot content, it presents itself as a Coinbase-related payment confirmation page showing a pending $500 transaction and prompting the visitor to connect a wallet to receive funds. The domain name combines the words "invoice" and "cbase," which may be intended to resemble Coinbase-related billing or payment activity.
Based on the available content, this does not appear to be a full corporate website or a general information portal. Instead, it appears to be a single-purpose landing page focused on a payment claim workflow tied to cryptocurrency wallet interaction. The page references Coinbase branding and loads the official Coinbase favicon, but the domain itself is not an official Coinbase domain, and no evidence in the scan data indicates that it is operated by Coinbase.
Safety Assessment for invoice-cbase[.]com
Several risk indicators are present at the time of this scan. The domain was flagged by 10 out of 91 security engines, and multiple web-classification sources categorized it as malicious, phishing-related, or a newly registered website. The screenshot also shows a page that closely imitates Coinbase branding while using a different domain name, which may indicate a look-alike setup intended to create trust and encourage wallet connection or other sensitive actions.
Additional context increases concern: the domain is only 1 day old, has no established traffic ranking, and uses a name that appears designed to resemble Coinbase-related invoicing or payment activity without being an official Coinbase property. Although the malware scan did not detect malicious files at the time of this scan and blacklist checks were largely clean, phishing pages often contain little or no traditional malware and can still present significant risk through credential theft, wallet-draining prompts, or deceptive payment flows.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate that was set to expire on 2026-07-29. It appears to be served by Apache from IP address 72.62.60.227, with hosting geolocated to Frankfurt am Main, Germany. DNSSEC appears to be unsigned, and the domain uses nameservers associated with dns-parking.com.
From a technical perspective, the presence of TLS only indicates encrypted transport and should not be treated as proof of legitimacy. The domain's extremely recent registration, unsigned DNSSEC status, parking-style nameserver setup, and limited site footprint are all factors that may be consistent with short-lived phishing infrastructure at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?