netcoins-login-sso-ca-x.webflow.io
Category: Hosting, Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of netcoins-login-sso-ca-x.webflow.io
This domain appears to host a cryptocurrency-themed landing page branded as "Netcoins Login" and presents itself as a portal for buying, selling, sending, and receiving digital assets. The page title, meta description, and screenshot all suggest a financial-services or crypto-trading context aimed at Canadian users, with references to account access, coin listings, and a sign-in flow.
However, the hostname structure is notable: it is a subdomain on webflow.io rather than an apparent primary corporate domain, and it combines brand-like terms such as "netcoins," "login," "sso," and "ca." Based on the naming pattern and the page presentation, this site appears to imitate or closely resemble a branded cryptocurrency login or promotional page rather than operating as a clearly established standalone financial platform.
The site is delivered through a hosted website-building platform and uses CDN-hosted assets. While the underlying webflow.io domain itself is longstanding, that age does not necessarily indicate that this specific subpage or hosted content has been established for the same length of time.
Safety Assessment for netcoins-login-sso-ca-x.webflow.io
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 18 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. The page also appears to mimic a cryptocurrency brand login experience, and the domain name combines brand-like wording with account-access terms such as "login" and "sso," which may be consistent with credential-harvesting patterns.
The malware scan of the page content did not detect malicious files at the time of analysis, and major content-focused threat databases listed in the scan were otherwise clean. However, a clean file scan does not rule out phishing, since phishing pages often rely on deceptive branding and form capture rather than malware delivery. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal on its own but still adds a small amount of caution.
Given the strong multi-engine phishing consensus, the brand-like presentation, and the very low trust score provided in the scan context, this website may pose potential risks to visitors, especially anyone considering entering account credentials or financial information.
Technical Description
The site uses a valid SSL certificate issued by a mainstream certificate authority, with expiry shown as 2026-08-25. It is served through Cloudflare infrastructure on IP address 104.18.36.248, with Cloudflare nameservers and hosting in Toronto, Canada. DNSSEC appears to be unsigned, which is not uncommon but means DNS responses do not benefit from DNSSEC validation.
From a technical standpoint, the page appears lightweight and is built on Webflow-hosted infrastructure, loading static assets from website-files.com and CloudFront. No malicious files or flagged external links were identified in the page scan itself, but the main concern here appears to be deceptive page purpose rather than exploit delivery or malware payloads.
Share your experience with this website. Was it safe? Did you encounter any issues?