auth-netcoins[.]webflow[.]io

This domain, auth-netcoins.webflow.io, operates as a credential phishing portal designed to impersonate the legitimate Netcoins cryptocurrency exchange login interface. Analysis indicates the site presents a fraudulent authentication page titled 'Netcoins | Login,' aiming to harvest user credentials, including usernames, passwords, and potentially two-factor authentication codes. The infrastructure targets individuals attempting to access Netcoins services, exploiting trust in the brand to facilitate unauthorized account access and financial theft. Infrastructure analysis reveals the domain was registered through MarkMonitor, Inc., a registrar commonly used for both legitimate and malicious purposes. The domain resolves to IP address 172.64.151.8, hosted on Cloudflare's network (AS13335), which is frequently leveraged to obscure hosting origins. As of the latest assessment, 17 out of 95 security vendors on VirusTotal flagged the domain as malicious. The domain appears on two security blocklists, PhishDestroy and PhishingDB, and was originally created on May 8, 2013, suggesting potential long-term abuse of the infrastructure. The SSL certificate is issued by Google Trust Services (WE1), which does not inherently indicate legitimacy due to its widespread use in both benign and malicious contexts. Users who visited auth-netcoins.webflow.io should immediately assume their credentials were compromised. Affected individuals should change their Netcoins account password and enable multi-factor authentication if not already active. Monitor the account for unauthorized transactions or configuration changes, such as altered withdrawal addresses or API keys. If financial discrepancies are detected, report the incident to Netcoins support and relevant financial authorities. Additionally, scan local devices for malware, as phishing sites may deploy malicious payloads or redirect to exploit kits. Exercise caution with any communications referencing Netcoins, particularly unsolicited emails or messages prompting urgent action.