shared-document-cfb9de.webflow.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of shared-document-cfb9de.webflow.io
This domain appears to be a Webflow-hosted landing page presented as a document-sharing or document-review portal. The page title is "Shared Document," and the visible content claims that a person has shared PDF documents for review and signature, with a call-to-action button labeled "View Secure Document." The layout is minimal and resembles a single-purpose landing page rather than a full business website.
Based on the screenshot and page text, the site may be attempting to imitate a document-delivery or secure file-sharing workflow. It also displays branding elements that do not clearly match the Webflow subdomain, which can be a warning sign when a page asks visitors to open documents or proceed to a secure-view step. The site appears to be operated through Webflow infrastructure rather than a dedicated branded domain.
Safety Assessment for shared-document-cfb9de.webflow.io
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 16 out of 91 security engines, with many of those detections classifying it as phishing or otherwise malicious. In addition, one major threat database listing was present, and the page content itself uses a common lure pattern: a generic shared-document message, a named recipient, and a prompt to open a supposedly secure file. That combination is frequently associated with credential-harvesting campaigns.
The malware scan did not identify malicious files in the limited set of scanned resources, but that does not outweigh the broader phishing-related detections and the social-engineering style of the page. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal than direct phishing detections but still adds some caution. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL certificate issued by a mainstream certificate authority, is served through Cloudflare infrastructure, and resolves to a Cloudflare IP in Toronto, Canada. The page is hosted on a webflow.io subdomain, with static assets loaded from Webflow and Cloudflare-related content delivery domains. DNSSEC appears to be unsigned.
From a security perspective, the presence of HTTPS should not be treated as proof of legitimacy, since phishing pages commonly use valid certificates as well. The infrastructure appears to rely on reputable hosting and CDN services, but those platforms can also be used by abusive pages. No malicious files were flagged in the limited file scan, though the overall detection pattern suggests the primary concern may be deceptive page content rather than exploit delivery.
Share your experience with this website. Was it safe? Did you encounter any issues?