# official---netcoins-ca-com-sso.webflow.io — MALICIOUS

> Domain official---netcoins-ca-com-sso.webflow.io is weaponized for Netcoins credential harvesting. Flagged by 19/95 VirusTotal vendors. Check the full report.

## Summary
PhishDestroy identifies elevated credential-harvesting activity linked to the domain official---netcoins-ca-com-sso.webflow.io, currently impersonating a legitimate Netcoins single sign-on page intended to deceive users into surrendering account credentials.

This domain was flagged by exactly 19 of 95 VirusTotal security vendors and resolves to 104.18.36.248 while presenting a Google Trust Services SSL certificate; the hostname shows no publicly documented creation date but has already accumulated placement on multiple threat intelligence blocklists.

Active takedown or blocklisting measures should be immediately applied to this domain; organizations are advised to search internal telemetry for any DNS resolutions to 104.18.36.248 or communications referencing official---netcoins-ca-com-sso.webflow.io and to flag any intercepted credentials for password reset and multi-factor re-enrollment.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 104.18.36.248

## Detection Status
- VirusTotal: 19 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9fc24140-3989-402b-918d-1e7886338c2a
- PhishDestroy: https://phishdestroy.io/domain/official---netcoins-ca-com-sso.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/official---netcoins-ca-com-sso.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/official---netcoins-ca-com-sso.webflow.io/
Last updated: 2026-03-21