ten-so-netcoins-cdn-x--auth[.]webflow[.]io

The domain ten-so-netcoins-cdn-x--auth.webflow.io is currently active and resolves to the IP address 172.64.151.8, which is owned by a major content-delivery network. The site is hosted on the Webflow platform, as indicated by the registrar information. An SSL certificate issued by Google Trust Services (WE1) is present, confirming that TLS is correctly configured. VirusTotal reports that 18 of 91 security vendors have flagged the domain, a detection rate that is consistent with known phishing infrastructure. No nameserver records are publicly available (NS_NOT_FOUND), limiting visibility into the underlying DNS configuration. The available intelligence does not include a detailed page analysis, so the exact phishing content and targeted credentials remain unknown. Given the active status, the presence of a valid certificate, and multiple vendor detections, defenders should treat the domain as malicious. Recommended actions include adding the domain to network-level blocklists, monitoring DNS queries for the IP 172.64.151.8, and employing URL filtering to prevent user access. Continuous re-evaluation is advised should additional telemetry become available.