sso-netcoins----com-cdn-k--nav[.]webflow[.]io

The domain sso-netcoins----com-cdn-k--nav.webflow.io is identified as a credential theft phishing site and is currently offline. This domain impersonates the NetCoins brand, attempting to trick users into revealing their login credentials.

Analysis indicates that the domain was registered through NameCheap, Inc. and resolves to the IP address 104.18.36.248, which is located in the United States and is part of Cloudflare, Inc.'s network (AS13335). The domain was created on February 21, 2026, and has been flagged by 17 out of 95 security vendors on VirusTotal. It also appears on 1 security blocklist. The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of security to unsuspecting users.

Given the current status of the domain as offline, the immediate risk is mitigated. However, it is recommended that users remain vigilant and avoid interacting with this domain or any similar-looking URLs. Organizations should update their security policies to include this domain in their blocklists and conduct awareness training to educate employees on the signs of credential theft phishing attacks. Additionally, any credentials that may have been compromised should be changed immediately, and multi-factor authentication should be enabled on all affected accounts.