netcoinzlogin[.]webflow[.]io

PhishDestroy identifies netcoinzlogin.webflow.io as an active credential phishing domain designed to steal cryptocurrency wallet access. The site impersonates a legitimate login portal for Netcoinz users, with infrastructure hosted on a high-risk IP and leveraging a Google-issued SSL certificate to appear legitimate. Security vendors have flagged this domain with moderate detection coverage, indicating rising threat activity targeting crypto investors.

This domain was flagged with 5 out of 95 VirusTotal security vendors detecting malicious content, resolves to IP 104.18.36.248 using Google Trust Services SSL, and operates under the Webflow.io platform. Technical indicators include no historical blocklist entries but low trust scores due to low detection overlap. The domain’s recent deployment and use of a reputable hosting provider highlight the sophistication of crypto credential theft campaigns.

To mitigate exposure, immediately block netcoinzlogin.webflow.io at DNS and firewall levels. Users should avoid entering credentials or wallet seeds on this domain and verify URLs via official Netcoinz channels. Blockchain security tools and crypto wallet extensions should be updated to detect credential theft attempts. Report this domain to threat intelligence platforms and financial fraud units to disrupt ongoing phishing operations.