secure--sso-netcoins-com-cdn--oauth.webflow.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of secure--sso-netcoins-com-cdn--oauth.webflow.io
This domain appears to host a Webflow-built page presenting itself as a NetCoins login or account-access portal. The page title and meta description reference logging in, trading, transfers, price alerts, and crypto account management, while the screenshot shows branding and marketing language associated with cryptocurrency trading services.
The hostname structure is unusual and includes multiple brand-like and technical terms such as "secure," "sso," "cdn," and "oauth" combined with "netcoins" under a webflow.io subdomain. Based on the visible content and classifications, the page appears to be aimed at users seeking access to a financial or cryptocurrency-related account rather than serving as a standalone informational website operated under a primary brand-owned domain.
Safety Assessment for secure--sso-netcoins-com-cdn--oauth.webflow.io
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 14 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. The page also appears to imitate a cryptocurrency platform login or account portal while using a third-party hosting subdomain with a long, brand-referencing hostname, which may be consistent with credential-harvesting or brand-impersonation patterns.
The malware scan did not detect malicious files in the limited content examined, and major content-malice threat databases were clean at the time of this scan. However, that cleaner result is outweighed here by the multi-engine phishing consensus, the deceptive-looking domain structure, and the financial-account theme of the page. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority and is served through Cloudflare infrastructure on IP address 172.64.151.8, with hosting geolocated to Canada based on available data. The domain uses Cloudflare nameservers, and DNSSEC appears to be unsigned.
From a technical standpoint, the use of HTTPS is positive but does not by itself establish legitimacy. A notable concern is that the page is hosted on a webflow.io subdomain rather than an apparent primary NetCoins-owned domain, while the hostname is constructed to resemble secure single-sign-on or OAuth-related infrastructure. That mismatch may be relevant when assessing impersonation risk.
Share your experience with this website. Was it safe? Did you encounter any issues?