# netcoinslogin-signin.webflow.io — MALICIOUS

> netcoinslogin-signin.webflow.io is a crypto-draining phishing site mimicking Netcoins' login portal. 20 of 95 VirusTotal engines flag this domain—verify URLs.

## Summary
PhishDestroy identifies netcoinslogin-signin.webflow.io as an active crypto-draining credential-phishing page posing as the legitimate Netcoins exchange login interface. The domain specifically targets users intending to access their Netcoins accounts, tricking them into submitting credentials that are harvested for subsequent unauthorized withdrawals or sale on dark-web markets.

This domain was flagged by 20 out of 95 VirusTotal security vendors, indicating broad detection among leading antivirus and threat-intelligence platforms. The site resolves to IP address 172.64.151.8 and leverages a Google Trust Services SSL certificate to appear legitimate. The Webflow.io subdomain structure suggests an attempt to exploit the reputation of the Webflow content-delivery network as a hosting platform for phishing content. Historical records show the domain was created recently, though the exact creation date is not publicly disclosed, which is common among disposable phishing infrastructure used to evade takedown efforts.

If you visited netcoinslogin-signin.webflow.io, immediately revoke any session tokens or API keys associated with your Netcoins account through the official portal. Reset your account password using the legitimate Netcoins website and enable two-factor authentication. Scan your device for malware using up-to-date antivirus software and consider rotating passwords for other services if you reused credentials. Report the domain to PhishDestroy for blocking and notify Netcoins' security team via their official support channels to aid in takedown and abuse mitigation.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 172.64.151.8

## Detection Status
- VirusTotal: 20 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6c027464-d1f2-4c06-978c-44b8d5a249e3
- PhishDestroy: https://phishdestroy.io/domain/netcoinslogin-signin.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/netcoinslogin-signin.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/netcoinslogin-signin.webflow.io/
Last updated: 2026-03-26