# sso-eng---ca-netcoins-com-cdn--auth.webflow.io — MALICIOUS

> PhishDestroy warns that sso-eng---ca-netcoins-com-cdn--auth.webflow.io hosts a crypto drainer mimicking Netcoins. 19/95 VirusTotal engines detect it.

## Summary
PhishDestroy identifies sso-eng---ca-netcoins-com-cdn--auth.webflow.io as a live phishing page that steals cryptocurrency wallet credentials. The site is disguised as a legitimate Netcoins login portal to trick users into entering private keys or recovery phrases, which attackers immediately drain into their own wallets.  This domain was flagged by 19 out of 95 VirusTotal security vendors and resolves to IP 104.18.36.248. It carries a Google Trust Services SSL certificate to appear authentic. The infrastructure is hosted on Webflow’s CDN, allowing rapid deployment and evasion of takedown efforts.  If you visited this page, disconnect from the internet immediately and run a full antivirus scan. Do not enter any wallet seeds, passwords, or recovery phrases. Revoke any connected wallet permissions through your wallet provider’s security settings. Report the incident to PhishDestroy for further investigation and remediation.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 104.18.36.248

## Detection Status
- VirusTotal: 19 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/c3a8a1a0-9fed-4fad-8470-fa90ea9aefda
- PhishDestroy: https://phishdestroy.io/domain/sso-eng---ca-netcoins-com-cdn--auth.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/sso-eng---ca-netcoins-com-cdn--auth.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/sso-eng---ca-netcoins-com-cdn--auth.webflow.io/
Last updated: 2026-03-21