zerointerestpromo.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of zerointerestpromo.com
The domain zerointerestpromo.com appears to present a login page styled to resemble PayPal, including PayPal branding, a PayPal-themed page title, and links pointing to PayPal-owned resources and help pages. Based on the screenshot and metadata, the page's apparent purpose is to prompt visitors to enter an email address or mobile number as part of an account sign-in flow.
The domain name itself does not appear to be an official PayPal domain, and the site does not present independent company information identifying a legitimate operator. Given the branding shown on the page, this website may be attempting to position itself as a financial-account access portal associated with PayPal rather than as a standalone service.
Safety Assessment for zerointerestpromo.com
Several risk indicators are present at the time of this scan. The domain was flagged by 10 out of 91 security engines, with multiple detections describing the site as phishing or otherwise malicious. In addition, the screenshot shows a PayPal-branded login interface hosted on a domain that does not appear to belong to PayPal, which is a common pattern associated with credential-harvesting pages. The domain is also extremely new, having been registered on the same day as the scan, which may further increase risk.
At the same time, some checks were clean: the malware scan did not identify flagged files, and major threat-database checks shown here did not list the domain at the time of this scan. However, clean file scanning does not rule out phishing, especially when the primary concern is deceptive page content rather than downloadable malware. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate that, at the time of this scan, was set to expire on 2026-10-26. It appears to be hosted on an Apache web server at IP address 95.111.240.229 with hosting attributed to Contabo GmbH in Lauterbourg, France. DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses may lack that additional layer of authenticity protection.
From an infrastructure perspective, the domain is newly registered, not ranked for notable traffic, and uses self-branded nameservers under the same domain. While these details do not by themselves prove abuse, they can be consistent with short-lived phishing setups when combined with the page content and multi-engine phishing detections.
Share your experience with this website. Was it safe? Did you encounter any issues?