cpcontacts.20-120-116-237.cprapid.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of cpcontacts.20-120-116-237.cprapid.com
This domain appears to host a login page styled to resemble Coinbase, a cryptocurrency platform. The page title and visible interface present a "Coinbase - Sign In" experience, including options such as sign-in with Google, Apple, Wallet, and Passkey, which suggests the page is attempting to collect account credentials or related authentication details.
The domain itself, cpcontacts.20-120-116-237.cprapid.com, does not appear to be an official Coinbase-owned web address. Instead, it appears to be a subdomain under cprapid.com hosted on cloud infrastructure. Based on the screenshot and metadata, the site appears to function as a branded sign-in portal rather than an independent informational or commercial website.
Safety Assessment for cpcontacts.20-120-116-237.cprapid.com
Multiple indicators suggest elevated risk at the time of this scan. The URL was flagged by 14 out of 91 security engines, with many of those detections classifying it as phishing. In addition, the page visually presents itself as a Coinbase sign-in screen while using a domain that does not appear to belong to Coinbase, which may indicate brand impersonation intended to capture user credentials.
The malware file scan did not detect malicious files in the sampled page resources, but that does not offset the stronger phishing-related signals. Blacklist checks for major content-malice databases were clean at the time of this scan, although the domain's IP address was listed on one mail-reputation blocklist, which is a weaker secondary signal and not by itself proof of harmful web content.
Based on the combination of multi-engine phishing detections, the non-official domain, and the Coinbase-branded login presentation, this website may pose potential risks to visitors.
Technical Description
The site was served over a valid Let's Encrypt SSL certificate that appears current until 2026-09-07. It is hosted on Microsoft Azure cloud infrastructure in the United States, uses a LiteSpeed web server, and resolves to IP address 20.120.116.237. DNSSEC appears to be unsigned.
From a technical standpoint, the presence of HTTPS only indicates encrypted transport and should not be treated as proof of legitimacy. The main concern here is not TLS configuration but the apparent mismatch between the displayed Coinbase branding and the unrelated hosting domain structure, which is commonly associated with credential-harvesting pages.
Share your experience with this website. Was it safe? Did you encounter any issues?