sso--netcoins-en--com-ca[.]webflow[.]io

The domain sso--netcoins-en--com-ca.webflow.io is currently active and serves a page titled “Netcoins Login”. It was registered on April 04, 2026 through Webflow and resolves to the Cloudflare‑owned IP address 172.64.151.8, which geolocates to Canada. The site presents a valid SSL certificate issued by Google Trust Services (WE1), indicating HTTPS is correctly configured. Security telemetry shows the domain is listed on one blocklist (PhishDestroy) and has been flagged by 19 of 94 VirusTotal scanners, reflecting a high likelihood of malicious intent. Independent reputation services assign a trust score of 1/100 (Scamadviser) and 0/100 (Gridinsoft), further confirming its dubious nature. The observed scam type is credential phishing, targeting Netcoins credentials. Nameserver information is unavailable (NS_NOT_FOUND), and no additional infrastructure details have been disclosed. Defenders should immediately block the domain at network and endpoint layers, monitor DNS queries for the associated IP, and consider sinkholing the IP range if feasible. Continuous re‑evaluation is advised, as further analysis of the landing page content could reveal additional indicators of compromise.