auths-io-coinsquare-sso-sso.webflow.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of auths-io-coinsquare-sso-sso.webflow.io
This domain appears to host a webpage themed around Coinsquare, a cryptocurrency trading platform. The page title and visible content present it as a login or onboarding portal for buying, selling, and trading digital assets such as Bitcoin and Ethereum, with branding and marketing language aimed at crypto investors.
However, the hostname is a long subdomain under webflow.io rather than an apparent primary Coinsquare-owned domain. That structure suggests the page may be a separately hosted landing page built on Webflow infrastructure rather than an official customer portal. Based on the domain naming pattern, page branding, and financial-services categorization, it appears to be targeting users seeking access to a cryptocurrency account or sign-in flow.
Safety Assessment for auths-io-coinsquare-sso-sso.webflow.io
This website shows multiple risk indicators at the time of this scan. It was flagged by 17 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. The page also presents itself as a Coinsquare login experience while using a webflow.io subdomain, which may indicate a look-alike page designed to resemble a legitimate financial service rather than an official login endpoint.
Additional context reinforces that concern. A threat database listing was present, and the domain's IP address was also listed on one mail-reputation blocklist; that DNS-based listing is a weaker signal on its own, but it adds minor caution alongside the stronger phishing detections. Although the malware scan did not detect malicious files at the time of analysis, phishing pages often rely on deceptive branding and credential capture rather than downloadable malware. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and it appears to be hosted behind Cloudflare infrastructure on IP address 172.64.151.8. The page uses Webflow-hosted assets and references an external domain, safe-square.xyz, which may warrant additional scrutiny in the context of a financial-themed login page.
DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from DNSSEC validation. The underlying webflow.io domain is old, but that age does not establish legitimacy for this specific subpage or campaign. From a technical standpoint, the main concerns are reputational rather than transport security: multi-engine phishing detections, a threat-database listing, and branding that appears inconsistent with the hosting domain.
Share your experience with this website. Was it safe? Did you encounter any issues?