netcons-logins[.]webflow[.]io

This domain, netcons-logins.webflow.io, is confirmed to be a credential phishing site designed to steal cryptocurrency login credentials from unsuspecting users. The phishing page mimics a legitimate cryptocurrency support platform, using the title 'Netcoins Login - Multiply Cryptocurrency Support Platform' to trick visitors into entering their sensitive information.

Analysis indicates that the domain is flagged by 17 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion among security professionals. The domain was registered through NameCheap, Inc., and was created on February 21, 2026. It resolves to the IP address 104.18.36.248, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The SSL certificate for the domain is issued by Google Trust Services / WE1, which can lend a false sense of security to users. Additionally, the domain appears on one security blocklist, specifically PhishDestroy, further confirming its malicious nature.

If users have visited this domain, they should immediately change their cryptocurrency platform login credentials and monitor their accounts for any unauthorized activity. It is also recommended to enable two-factor authentication (2FA) on all relevant accounts to add an additional layer of security. Users should report the incident to their cryptocurrency service provider and consider running a full system scan to ensure no malware has been installed.