help---ex--azuure---coinbase-app.webflow.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of help---ex--azuure---coinbase-app.webflow.io
This URL is a subdomain hosted on the Webflow platform and, at the time of the scan, it displayed a generic "404 - Page not found" message rather than a functioning website. The subdomain string contains terms resembling support-related wording and the name of a well-known cryptocurrency platform, which suggests it may have been intended for a Coinbase-themed page or campaign rather than an independent branded service.
Based on the domain structure, this does not appear to be an official Coinbase-owned domain. Instead, it appears to be a third-party hosted page created under webflow.io. No meaningful site content, company details, or legitimate service information were visible in the captured page, so the operator and intended purpose cannot be verified from the live content alone.
Although the current page is inactive, subdomains like this are sometimes used temporarily for landing pages, credential-harvesting pages, or short-lived impersonation campaigns. In this case, the naming pattern and hosting context are more consistent with a disposable hosted page than with a formal customer-support or financial-services website.
Safety Assessment for help---ex--azuure---coinbase-app.webflow.io
Multiple security signals indicate elevated risk at the time of this scan. The URL was flagged by 16 out of 91 security engines, with several classifying it as phishing or otherwise malicious. In addition, major threat-database checks showed social-engineering listings, and another phishing-focused database also listed the domain. The domain's IP address was also present on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting.
A further concern is that the domain closely resembles coinbase.com in plain language and may be a look-alike intended to exploit trust in the Coinbase brand. That resemblance is especially notable because the visible page itself is only a 404 error, which can happen when abusive pages are removed after being reported or when a temporary phishing page is no longer active. The lack of ranking and absence of normal site content add to the cautionary picture.
While one malware scan reported no flagged files, that result carries limited weight here because no files were scanned and the broader reputation data is strongly negative. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain is served through Cloudflare infrastructure on IP address 172.64.151.8 and presented a valid TLS certificate issued by Google Trust Services, expiring in August 2026. The nameservers are also on Cloudflare, and DNSSEC appears to be unsigned. A valid certificate indicates encrypted transport, but it does not by itself confirm legitimacy.
The scanned page returned a simple 404 response with no active content, scripts, links, or iframes detected in the provided scan. Technically, this suggests the hosted page was unavailable at the time of capture, but the strong phishing-related reputation signals indicate the subdomain may previously have hosted abusive content or may have been created for that purpose.
Share your experience with this website. Was it safe? Did you encounter any issues?