netcoins-login-site[.]webflow[.]io

This domain, netcoins-login-site.webflow.io, is a credential theft operation designed to harvest login details from users attempting to access Netcoins, a legitimate cryptocurrency platform. The site presents a fraudulent login interface under the pretense of a "Multiply Cryptocurrency Support Platform," tricking victims into entering sensitive account information. Such stolen credentials are typically used for unauthorized account access, financial theft, or further exploitation in follow-up attacks targeting cryptocurrency holdings. Analysis indicates the domain was registered through Webflow and is flagged by 17 out of 95 security vendors on VirusTotal, confirming its malicious classification. Infrastructure analysis reveals the site resolves to the IP address 104.18.36.248, hosted on Cloudflare's network (AS13335). The domain appears on at least one security blocklist and was recently taken offline, though its prior activity remains a concern for potential victims. The page title explicitly mimics Netcoins branding, reinforcing its intent to deceive users familiar with the legitimate service. If you visited netcoins-login-site.webflow.io and entered login credentials or personal information, immediate action is required. First, revoke access to any linked accounts on the legitimate Netcoins platform and enable multi-factor authentication if not already active. Monitor all associated financial accounts for unauthorized transactions and report suspicious activity to the platform’s support team. Additionally, scan your device for malware using updated security tools to ensure no secondary infections were introduced. Consider placing a fraud alert or credit freeze if sensitive data was exposed, and remain vigilant for phishing attempts via email or messaging platforms.