# netcoinsz-login.webflow.io — MALICIOUS

> Credential phishing site netcoinsz-login.webflow.io mimics Netcoins login. 20/95 security vendors flagged it—check the full report to verify risks.

## Summary
PhishDestroy identifies netcoinsz-login.webflow.io as an active credential phishing site. This domain delivers a fake Netcoins login page to harvest credentials.


The site was flagged by 20 out of 95 VirusTotal vendors, resolves to IP 104.18.36.248, and uses a Google Trust Services SSL certificate. The domain is hosted on Webflow and has been active with elevated risk status.


Block access immediately via DNS or endpoint rules. Users who entered credentials should rotate passwords and enable MFA. Report the domain to your security team for takedown.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 104.18.36.248

## Detection Status
- VirusTotal: 20 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6907cbf5-3c99-4fd5-8a14-e59b944dfee0
- PhishDestroy: https://phishdestroy.io/domain/netcoinsz-login.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/netcoinsz-login.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/netcoinsz-login.webflow.io/
Last updated: 2026-03-21