xtbexchange.com
Category: Phishing And Other Frauds
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of xtbexchange.com
xtbexchange.com appears to present itself as a cryptocurrency and digital-asset platform. Based on the page title, meta description, and screenshot, the site is styled as a landing page for a self-custodial crypto wallet and related Web3 services, with messaging focused on managing crypto assets, wallet access, and on-chain tools.
However, the visible branding on the page references Crypto.com Onchain, while the actual domain is xtbexchange.com. That mismatch suggests the site may be attempting to imitate or reuse the branding of an established cryptocurrency company rather than operating under its own clearly identified brand. The scan data also shows a financial-services classification from one web-classification source and a phishing/fraud classification from another, so the site appears to fall within the cryptocurrency / financial-services space with potential impersonation concerns.
Safety Assessment for xtbexchange.com
At the time of this scan, malware and blacklist signals were mixed. No threats were detected by 0 out of 91 security engines, the malware scan reported 0 flagged files out of 19 checked, and major threat-database checks were clean. Those are favorable point-in-time indicators, but they do not rule out abuse on very new domains.
There are still notable risk factors. The domain is only 4 days old, has no established traffic ranking, and one web-classification source categorized it as phishing and other frauds. In addition, the page content appears to closely mimic Crypto.com branding even though the domain name is different, which may indicate a look-alike or impersonation attempt. In cryptocurrency contexts, this kind of branding mismatch can increase the risk of credential theft, wallet-drain scams, or misleading download prompts.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid SSL/TLS certificate issued by Google Trust Services, expiring on 2026-10-07. It is hosted behind Cloudflare infrastructure, with the server IP resolving to 172.67.188.198 and nameservers set to Cloudflare. This setup is common for both legitimate and questionable sites, so it should not be treated as a trust signal by itself.
From a domain-security perspective, the registration is extremely recent and DNSSEC appears to be unsigned. The scan did not identify flagged files, malicious external links, or iframe-based injections at the time of testing. Even so, the combination of a newly registered domain, financial/crypto theme, and branding mismatch is a technical and operational concern worth weighing carefully.
Share your experience with this website. Was it safe? Did you encounter any issues?