promo-codes[.]online
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of promo-codes[.]online
The domain promo-codes[.]online appears to present promotional or referral-style offers, and the scanned page specifically advertises a Coinbase sign-up bonus in German. The page title and visible content suggest it is targeting users looking for a coupon or bonus code related to cryptocurrency account registration, rather than operating as Coinbase's official primary website.
Based on the screenshot, the site is a very minimal landing page with Coinbase branding, a call-to-action button, and brief explanatory text about receiving a 10€ BTC bonus after registration and qualifying transactions. The operator is not clearly identified from the visible content, aside from a small "Impressum" link, so ownership and any formal relationship with Coinbase are not evident from the available data.
The domain name itself is generic and broad, while the actual page content is narrowly focused on a single financial brand. That mismatch may indicate an affiliate, lead-generation, or imitation-style landing page rather than an established standalone service.
Safety Assessment for promo-codes[.]online
Several scan signals raise concern about this domain at the time of analysis. It was flagged by 18 out of 94 security engines, with many of those detections classifying it as phishing or malicious. In addition, the page prominently uses Coinbase branding on a non-Coinbase domain, which may cause confusion for visitors and could indicate an attempt to imitate or piggyback on a well-known financial platform.
At the same time, not every scan source agreed: the malware file scan did not detect malicious files in the limited content examined, and some blacklist databases did not list the domain at the time of this scan. That kind of mixed result can happen when a page is primarily deceptive in presentation or redirection behavior rather than serving obvious malware payloads.
The combination of a very low trust score, lack of broad site reputation, multiple phishing-related detections, and branding that appears to reference a major cryptocurrency company without using its official domain suggests elevated risk. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate, which means traffic can be encrypted in transit, but HTTPS alone does not verify that the operator is legitimate. The domain is hosted on Vercel infrastructure at IP address 76.76.21.21, uses registrar-provided nameservers, and the domain registration appears to have been active since 2021 with an expiry in 2027.
DNSSEC appears to be unsigned, so there is no additional DNS authenticity protection visible from the provided data. No malicious files, flagged external links, or iframes were identified in the limited malware scan results, but the main concern here appears to be the page's purpose and presentation rather than server-side exploitation indicators.
Share your experience with this website. Was it safe? Did you encounter any issues?