# netcoinsloginz.webflow.io — MALICIOUS

> netcoinsloginz.webflow.io is a crypto drainer phishing site mimicking Netcoins login. It is flagged by 6/95 VirusTotal scanners.

## Summary
This domain, netcoinsloginz.webflow.io, is an active credential phishing site that impersonates the Netcoins login page to steal cryptocurrency account credentials. Unsuspecting users who enter their login details risk immediate unauthorized access to their accounts, where funds can be drained or transferred without consent. The page is designed to look nearly identical to the legitimate Netcoins platform, making it difficult to detect without technical inspection or security tools.


PhishDestroy identifies this domain as elevated-risk based on multiple indicators. It resolves to IP address 104.18.36.248 and uses a Google Trust Services SSL certificate, which may appear legitimate at first glance. The domain was flagged by 6 out of 95 VirusTotal security vendors, indicating partial detection by antivirus engines. The Webflow.io subdomain and recent creation suggest a quick setup to evade blacklists, targeting users during urgent login attempts.


If you visited netcoinsloginz.webflow.io, do not enter any credentials or personal information. Immediately change your Netcoins account password using the official website (netcoins.com) on a verified device. Enable two-factor authentication if not already active. Scan your device for malware using reputable antivirus software. Report the domain to PhishDestroy and avoid clicking any links from emails or ads related to this site. Always verify URLs carefully and use bookmarked links for financial platforms.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 104.18.36.248

## Detection Status
- VirusTotal: 6 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b9e80c4c-777b-43ac-b5c3-1c85b60078ec
- PhishDestroy: https://phishdestroy.io/domain/netcoinsloginz.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/netcoinsloginz.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/netcoinsloginz.webflow.io/
Last updated: 2026-03-22