coinnodeportal[.]netlify[.]app

This domain, coinnodeportal.netlify.app, is flagged as a generic phishing site with an elevated risk rating. The site was hosted on Netlify and resolved to IP address 98.84.224.111, which belongs to Amazon.com, Inc. (AS14618) and is geolocated in the United States. The TLS certificate presented is a DigiCert Global G2 RSA SHA256 2020 CA1 chain issued by DigiCert Inc., confirming that the connection was encrypted. An HTTP request returned a 404 status, indicating that the page is no longer available.

The page title that was captured reads “Decentralization,” but no further content was retrieved before the site was taken offline. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy. VirusTotal scanning reported a single positive detection out of ninety‑five vendors, reinforcing the suspicion of malicious intent. Scamadviser assigns a trust score of 1 / 100, reflecting an extremely low reputation.

Automated analysis identified Netlify hosting, HSTS enforcement, and the DigiCert certificate as the primary technologies. While the exact phishing vector and target audience remain unclear, the combination of low trust score, blocklist presence, and vendor detection suggests an active threat. Defenders should add the domain to deny lists, monitor DNS queries for the address 98.84.224.111, and ensure that any internal references to the “Decentralization” title are investigated for potential credential‑stealing campaigns. Continued observation is advised in case the infrastructure is re‑used under a different subdomain.