netcainslogi[.]webflow[.]io

PhishDestroy has flagged netcainslogi.webflow.io as an active crypto wallet phishing site that masquerades as the legitimate Netcoins login portal to steal cryptocurrency funds. Visitors who enter their email, password, or two-factor codes on this page risk immediate loss of digital assets, as the harvested credentials are sent to attacker-controlled servers rather than Netcoins’ real infrastructure. The page’s title, “Netcoins Login | Leading Crypto Assets,” copies the genuine Netcoins branding to lower user suspicion and increase the chance of credential submission. This domain was flagged on multiple indicators. VirusTotal analysis shows 17 out of 95 security vendors now detect netcainslogi.webflow.io as malicious, and the site resolves to IP address 172.64.151.8 behind a Google Trust Services SSL certificate. The Webflow subdomain was created specifically to host this phishing kit and has remained active for several weeks, indicating ongoing malicious intent rather than a temporary compromise. If you visited netcainslogi.webflow.io or entered any login details, immediately change your Netcoins password using only the official website (netcoins.com), revoke any active API keys, and enable two-factor authentication with an authenticator app or hardware key. Next, scan your devices for malware using up-to-date antivirus tools and consider freezing any related bank or crypto accounts as a precaution. Report the domain to Netcoins support and to your local cybercrime unit. For a deeper technical breakdown and additional protective steps, consult the full PhishDestroy threat assessment linked below.