aso--ndax--logii--auth[.]webflow[.]io

This domain, aso--ndax--logii--auth.webflow.io, is flagged for brand impersonation, specifically mimicking a legitimate investment platform. Analysis indicates that the domain has been used to deceive users by presenting itself as an all-in-one crypto trading platform for Canadians, with the aim of stealing sensitive information or financial assets.

Infrastructure analysis reveals that the domain was registered through Webflow and created on March 03, 2026. The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of security to unsuspecting users. The domain resolves to the IP address 104.18.36.248, which is located in the United States and is part of the Cloudflare, Inc. network (AS13335). According to VirusTotal, 19 out of 95 security vendors have flagged this domain as malicious. Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy.

If users have visited this domain, they are advised to immediately change any passwords or sensitive information that may have been entered on the site. It is also recommended to monitor financial accounts and credit reports for any unusual activity. Users should report the incident to their respective financial institutions and consider using a reputable security scanner to check their devices for any potential malware infections.