coinbases-wallets.webflow.io
Category: Hosting, Information Technology, Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of coinbases-wallets.webflow.io
coinbases-wallets.webflow.io appears to be a subdomain hosted on the Webflow platform rather than an independent primary domain. The visible page at the time of this scan shows a generic "404 - Page not found" message, indicating that the specific content previously hosted there may have been removed, moved, or is otherwise unavailable.
Based on the domain string, the subdomain name appears to reference Coinbase and cryptocurrency wallets, which could suggest an attempt to attract users looking for digital-asset account or wallet services. Multiple web-classification sources associated this address with phishing or fraud-related activity, so the naming pattern may have been used in a misleading context rather than for a legitimate standalone service.
The underlying web infrastructure appears to be operated through Webflow and Cloudflare, while the broader webflow.io domain is long-established. That age reflects the parent platform domain and should not be interpreted as proof that this particular subdomain has a long or trustworthy operating history.
Safety Assessment for coinbases-wallets.webflow.io
Scan findings indicate elevated risk signals for this URL at the time of this scan. It was flagged by 11 out of 91 security engines, and multiple web-classification providers categorized it as phishing or fraud-related. In addition, a major threat database listed the URL for social-engineering activity, which is a stronger indicator than a generic heuristic alert.
The current page returns a 404 error, so the suspicious content may no longer be publicly accessible. However, a missing page does not negate earlier detections, especially when the subdomain name appears to reference a well-known cryptocurrency brand in a potentially misleading way. The domain's IP address was also listed on one mail-reputation blocklist; that signal is weaker than phishing detections, but it adds a small amount of caution.
The malware scan did not detect malicious files in the limited content that was available during this check, but that result should be weighed against the broader phishing-related detections and blacklist listing. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, with expiry shown as 2026-10-23. It is served through Cloudflare infrastructure on IP address 172.64.151.8, with Cloudflare nameservers and hosting consistent with a reverse-proxy/CDN setup. The page observed during the scan was a standard 404 response, and only two benign-looking static asset URLs were referenced.
DNSSEC appears to be unsigned for the domain. No malicious files, flagged external links, or iframes were identified in the limited page content available at the time of analysis. Even so, infrastructure features such as HTTPS and CDN hosting do not by themselves reduce phishing risk when independent security detections and blacklist data indicate possible abuse.
Share your experience with this website. Was it safe? Did you encounter any issues?