phnixreward[.]live
Category: Suspicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of phnixreward[.]live
phnixreward[.]live appears to present itself as a cryptocurrency reward-claim portal for a token called "$PHNIX" on the XRP Ledger. The page title and on-screen text promote a "Reward Allocation" and invite visitors to check eligibility and claim tokens, with sections such as Claim, Activity, Process, and Ecosystem. The visual design is polished and themed around a phoenix-style brand identity.
Based on the domain name and page content, the site may be intended to attract XRPL users who believe they are eligible for a token distribution or airdrop-style reward. No clear operator identity, company details, or organizational ownership information is provided in the supplied scan data, so the entity behind the site cannot be independently verified from this snapshot alone.
Safety Assessment for phnixreward[.]live
This domain shows several cautionary signals at the time of this scan. It was flagged by 3 out of 92 security engines, and web-classification data labeled it as suspicious and as a newly registered website. The domain is only 8 days old, has no established popularity ranking, and promotes a crypto token claim workflow, which is a pattern commonly associated with higher-risk social-engineering campaigns even when direct malware is not detected.
At the same time, the malware scan included in the data did not identify malicious files, and major blacklist and threat-database checks were clean at the time of review. That reduces confidence in any claim of active malware hosting, but it does not remove the broader risk associated with a very new cryptocurrency reward site asking users to engage with a token-claim process.
Based on the available scan data, this website may pose potential risks to visitors, particularly those considering connecting wallets or submitting crypto-related information.
Technical Description
The site uses a valid Let's Encrypt SSL certificate and is served through Cloudflare infrastructure, with the observed IP resolving to Cloudflare in Toronto, Canada. Nameservers also point to Cloudflare, suggesting the origin infrastructure is shielded behind a reverse-proxy/CDN setup. DNSSEC appears to be unsigned.
From the supplied scan, no malicious files, flagged external links, or iframe-based threats were identified. However, the domain's very recent registration date, lack of DNSSEC, and limited historical reputation mean there is relatively little trust history available at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?