netcoinesloginhub[.]webflow[.]io

The domain netcoinesloginhub.webflow.io has been confirmed as a brand impersonation phishing site specifically targeting Netcoins, a cryptocurrency trading and investing platform. The site is currently offline after being taken down, but its recent activity posed a significant threat to users who may have been tricked into entering their login credentials. The page title, "Netcoins Login | Crypto Trading & Investing," was designed to closely mimic the legitimate Netcoins interface, making it a convincing lure for unsuspecting victims.

Technical analysis reveals that the domain was created on February 21, 2026, and registered through NameCheap, Inc. It resolved to IP address 104.18.36.248 and used an SSL certificate issued by Google Trust Services (WE1), which can give a false sense of security. VirusTotal flagged the domain by 16 out of 95 security vendors, indicating broad detection by the security community. Additionally, the domain appears on at least one security blocklist, further confirming its malicious nature. Despite the SSL certificate and professional appearance, these indicators collectively point to a well-crafted phishing operation aimed at stealing Netcoins account credentials.

Given the elevated risk level and confirmed impersonation of Netcoins, users are strongly advised to avoid any interactions with this domain or similar lookalikes. If you have already entered personal information or credentials on this site, change your Netcoins password immediately and enable two-factor authentication. Monitor your accounts for any unauthorized activity and report any suspicious transactions. PhishDestroy recommends that all users bookmark the official Netcoins website and always verify the URL before logging in, as phishing sites often use slight variations of legitimate domain names.