help--ext--coin.webflow.io

This website shows multiple risk indicators at the time of this scan. It was flagged by 15 out of 91 security engines, with the detections broadly classifying it as phishing or malicious. In addition, a major threat database listed the URL for social-engineering activity, which is a strong signal compared with weaker heuristic-only findings. Although the malware file scan did not detect malicious files in the sampled content, phishing pages often rely on deceptive branding and credential harvesting rather than downloadable malware.

The page content also appears to imitate Coinbase branding while operating from a Webflow subdomain, which may indicate a look-alike or impersonation setup rather than an official Coinbase property. The combination of a third-party hosted subdomain, wallet-connection prompts, and branding associated with a well-known cryptocurrency platform materially increases the risk of credential theft or wallet-related fraud. The domain's IP address is also listed on one mail-reputation blocklist, though that signal is secondary and less important than the phishing detections and social-engineering listing.

Based on these findings, this website may pose potential risks to visitors.