cpcontacts.165-154-236-200.cprapid.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of cpcontacts.165-154-236-200.cprapid.com
The domain cpcontacts.165-154-236-200.cprapid.com appears to host a login page styled to resemble Coinbase, a well-known cryptocurrency platform. The page title and meta description reference Coinbase sign-in functionality, and the screenshot shows a credential-entry form with options such as email login, passkey, Google, Apple, and wallet sign-in.
Based on the domain structure, this does not appear to be an official Coinbase web address. Instead, it is a subdomain under cprapid.com that includes an IP-like string, which may indicate temporary or campaign-style hosting rather than a primary branded service. The content shown is focused on account access rather than general informational or transactional website features.
Safety Assessment for cpcontacts.165-154-236-200.cprapid.com
This website raises significant concerns based on the available scan data. At the time of this scan, 12 out of 91 security engines flagged the URL, with multiple detections describing it as phishing or otherwise malicious. The screenshot and metadata also show a page presenting itself as a Coinbase sign-in portal while using a non-Coinbase domain, which may indicate an attempt to imitate a known financial or cryptocurrency brand in order to collect user credentials.
Additional context is mixed but does not offset the primary risk signals. A malware file scan did not detect flagged files at the time of analysis, and major threat-database checks listed in the scan were otherwise clean; however, the domain's IP address is listed on one mail-reputation blocklist, which is a minor cautionary signal rather than direct proof of harmful web content. The strongest indicators here are the multi-engine phishing detections and the apparent mismatch between the displayed brand and the actual domain.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate that, at the time of this scan, was set to expire on 2026-10-11. It appears to be served by a LiteSpeed web server on IP address 165.154.236.200, hosted by Scloud Pte Ltd in Singapore. DNSSEC is not enabled for the domain, and the nameservers are listed under pdns.tech.
From a technical perspective, the presence of valid SSL/TLS should not be treated as proof of legitimacy, since phishing pages commonly use valid certificates as well. The use of a branded login page on an unrelated subdomain is the more relevant concern in this case.
Share your experience with this website. Was it safe? Did you encounter any issues?