auth-netcoins-canada-sso[.]webflow[.]io
“Netcoins | Login”
auth-netcoins-canada-sso.webflow.io — Último ativo conhecido (HTTP 200). Tipo de golpe: Credential Phishing. Resumo das evidências: VirusTotal 17/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); URLQuery 2 alerts; CF Radar malicious; PhishDestroy score 100/100. Registrador: Webflow.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
PhishDestroy identifies an active crypto-drainer phishing campaign targeting Netcoins Canada users. The domain auth-netcoins-canada-sso.webflow.io poses as a legitimate single sign-on portal but harvests credentials and drains cryptocurrency wallets. This site is designed to trick visitors into entering login details or connecting cryptocurrency wallets under false pretenses, with the ultimate goal of stealing funds. The threat is elevated due to its convincing impersonation of a regulated Canadian exchange and active distribution in phishing emails and social media messages. This domain was flagged by 17 out of 95 VirusTotal security vendors and resolves to IP address 104.18.36.248. The SSL certificate is issued by Google Trust Services, which adds a false sense of legitimacy. The domain is hosted on Webflow, a legitimate platform often abused by threat actors to create plausible-looking phishing pages quickly. The low detection rate among vendors suggests it is a relatively new campaign designed to evade early detection. The domain structure mimics official Netcoins SSO endpoints, increasing the likelihood of successful deception among users expecting to access their accounts. If you visited auth-netcoins-canada-sso.webflow.io, stop using any connected cryptocurrency wallets immediately. Disconnect any wallets or browser extensions linked during your visit. Do not enter any login credentials or personal information. Run a full antivirus scan on your device. Report the domain to Netcoins Canada and PhishDestroy for takedown. Enable two-factor authentication on all cryptocurrency exchange accounts. Always verify links by typing the official domain directly into your browser or using PhishDestroy’s link checker. Be cautious of shortened URLs or unexpected login prompts, especially in unsolicited messages.
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | auth-netcoins-canada-sso.webflow.io |
malicious | Sinkholed |
| Cloudflare DNS | auth-netcoins-canada-sso.webflow.io |
malicious | Sinkholed |
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 3 identified
Visual website builder with hosted publishing.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of auth-netcoins-canada-sso.webflow.io · checked Apr 1, 2026
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo