netcoiens-login[.]webflow[.]io

This domain is flagged as a high-risk credential phishing site targeting Netcoins users. The domain was registered on March 26, 2026, through Webflow and remains active as of the report date, July 12, 2026. Infrastructure analysis shows the domain resolves to IP address 104.18.36.248, hosted by Cloudflare, Inc. in Canada, and utilizes Cloudflare services with HTTP/3 support. The SSL certificate is issued by Google Trust Services. Security assessments are uniformly negative: Scamadviser assigns a trust score of 1/100, Gridinsoft rates it 0/100, and VirusTotal reports 16 out of 94 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is blocked by PhishDestroy. The page title explicitly presents itself as a Netcoins login portal, which aligns with the identified credential phishing threat type. No other legitimate services or content have been associated with this domain. Defenders should block all traffic to this domain, add it to threat intelligence feeds, and monitor for related subdomains or variations. Organizations with users potentially exposed to Netcoins login pages should issue alerts and verify that no credentials have been submitted to this fraudulent site.