sso-azure-netcoins-com-cdn---auth[.]webflow[.]io

This domain, sso-azure-netcoins-com-cdn---auth.webflow.io, operates as a fraudulent authentication portal impersonating Netcoins, a legitimate cryptocurrency exchange. Analysis indicates the site presents a counterfeit login interface designed to harvest user credentials, potentially enabling unauthorized access to digital asset accounts. The infrastructure appears tailored to deceive users into entering sensitive information under the guise of a trusted platform, increasing the risk of financial theft or account compromise. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on April 24, 2026, through Webflow, a platform frequently exploited for hosting phishing content due to its ease of deployment. Security vendors on VirusTotal have flagged the domain, with 19 out of 95 engines detecting it as malicious. The site is currently listed on one security blocklist and resolves to the IP address 104.18.36.248, associated with Cloudflare, Inc. in Canada. The SSL certificate, issued by Google Trust Services (WE1), further masks the malicious intent behind a veneer of legitimacy. Users who visited sso-azure-netcoins-com-cdn---auth.webflow.io should take immediate remedial action. Those who entered credentials should assume their accounts are compromised and initiate password resets on the legitimate Netcoins platform. Additionally, monitor linked financial accounts for unauthorized transactions and enable multi-factor authentication where available. Devices used to access the site should be scanned for malware, and browser sessions should be cleared to remove any residual tracking elements. Given the domain’s impersonation of a cryptocurrency service, affected users are advised to review their wallet security and consider revoking any suspicious API keys or session tokens.