sso--azure-netcoins-com-cdn-autths[.]webflow[.]io

This domain is flagged as an elevated-risk phishing resource specifically designed to impersonate the Netcoins cryptocurrency exchange login portal. Analysis indicates the site functions as a credential harvesting endpoint, targeting users attempting to access legitimate Netcoins services. The page title 'Netcoins | Login' directly mimics the authentic platform, increasing the likelihood of successful deception among unsuspecting victims seeking to manage digital assets. Infrastructure analysis reveals multiple technical indicators supporting this classification. The domain, sso--azure-netcoins-com-cdn-autths.webflow.io, is hosted on IP address 172.64.151.8 and was registered through NameCheap, Inc. on February 21, 2026, though the creation date appears anomalous, suggesting potential domain spoofing or backdating. Security vendor detections on VirusTotal report 17 out of 95 engines flagging the domain as malicious, while it appears on at least one security blocklist. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the inherent risk, as phishing sites frequently employ valid encryption to appear legitimate. Mitigation against this credential harvesting threat requires immediate user awareness and technical controls. Users who may have interacted with this domain should invalidate any entered credentials by resetting passwords on the legitimate Netcoins platform and enabling multi-factor authentication. Organizations should update web filtering rules to block the domain and its associated IP address, while security teams are advised to monitor for unauthorized access attempts originating from credentials potentially compromised via this phishing endpoint. Given the domain's current offline status, further monitoring for reactivation or related infrastructure is recommended.