netcoins-loggii[.]webflow[.]io

PhishDestroy identifies netcoins-loggii.webflow.io as an active crypto drainer posing as the legitimate Netcoins cryptocurrency exchange platform. This fraudulent domain leverages Webflow.io to host a convincing replica of the Netcoins login and transaction interface, with the sole objective of siphoning deposited cryptocurrency assets into attacker-controlled wallets. The elevated risk level reflects the domain’s confirmed malicious intent and the presence of active victim reports. This domain was flagged by 16 out of 95 VirusTotal security vendors, indicating significant but not universal detection. It resolves to IP address 172.64.151.8, which is associated with Cloudflare infrastructure and hosts multiple phishing campaigns. The SSL certificate issued by Google Trust Services adds a veneer of legitimacy, potentially misleading users. The domain was created recently and has already been added to multiple real-time blocklists, including PhishTank and OpenPhish, though its reliance on a legitimate hosting provider (Webflow.io) and SSL certificate complicates takedown efforts. Users must treat this domain as hostile. If you have visited netcoins-loggii.webflow.io, disconnect your device from the internet, scan for malware, and revoke any active session tokens or API keys used on financial platforms. Never enter credentials or deposit crypto assets into unknown or redirected interfaces. Report the domain to your email provider and security vendor. Always verify URLs via official channels and use hardware wallets or trusted platforms for transactions. No legitimate financial service uses Webflow.io subdomains for official operations.