# sso--secure--cdn--ndax--authth.webflow.io -- Security Report > sso--secure--cdn--ndax--authth.webflow.io: High-Risk Crypto Drainer Domain Expos ## Domain Classification - Domain: sso--secure--cdn--ndax--authth.webflow.io - Status: dead - Threat: confirmed phishing - Severity: Critical - VirusTotal: 18 detections - Blocklists: 0 - Google Safe Browsing: Not flagged ## Registration - Registrar: REGISTRAR_NOT_FOUND - IP: 172.64.151.8 - SSL: ## Analysis The domain sso--secure--cdn--ndax--authth.webflow.io is a confirmed phishing site designed to trick users into connecting their cryptocurrency wallets under the guise of a secure authentication process. Once accessed, the site executes a crypto drainer payload, silently transferring funds to attacker-controlled wallets. This malicious domain leverages deceptive naming conventions, including repeated hyphens and terms like 'secure' and 'auth,' to appear legitimate at first glance. It exploits the ## Source Report generated by PhishDestroy (https://phishdestroy.io/domain/sso--secure--cdn--ndax--authth.webflow.io/) Data from VirusTotal, Google Safe Browsing, OTX, and proprietary scanners.