netcoins--logi--cdn--tab[.]webflow[.]io

On July 12, 2026, the domain netcoins--logi--cdn--tab.webflow.io was flagged as a high-risk credential phishing site. The domain was created on March 5, 2026, and is registered through MarkMonitor, Inc., a reputable domain registrar. However, the SSL certificate is issued by Google Trust Services, which, while legitimate, does not guarantee the safety of a website. The page title, 'Netcoins Login - Trade Assets and Manage Portfolio,' suggests that the site is attempting to mimic a legitimate cryptocurrency trading platform, which is a common tactic in credential phishing attacks. The domain resolves to the IP address 172.64.151.8, located in the United States and associated with Cloudflare, Inc. (AS13335), a known content delivery network and domain registrar. The site's Scamadviser trust score of 1 out of 100 and Gridinsoft trust score of 0 out of 100 indicate a high level of suspicion and potential risk. Additionally, 18 out of 95 security vendors on VirusTotal have flagged this domain as malicious, further confirming its suspicious nature. The domain is currently active and is listed on one security blocklist, specifically PhishDestroy. Defenders should configure their security systems to block this domain and alert users to the potential for credential theft. While the exact content and structure of the site have not been analyzed, the available evidence strongly suggests that this domain is being used to trick users into providing sensitive login information, which can lead to unauthorized access to their cryptocurrency accounts. Security teams are advised to monitor for any related activity and educate users on the signs of phishing attacks to prevent potential compromise.