logi-ntcoins-eng[.]framer[.]ai

The domain logi-ntcoins-eng.framer.ai is a generic phishing site posing as a cryptocurrency-related service under the name 'Netcoins'. It does not impersonate a specific brand or employ a known drainer kit but is designed to deceive users into disclosing sensitive information or credentials. As of the latest verification, logi-ntcoins-eng.framer.ai has been taken offline, though it previously exhibited elevated risk due to its phishing activity.

Technical indicators confirm logi-ntcoins-eng.framer.ai was flagged by 1 of 95 VirusTotal security vendors, including Kaspersky. The domain is registered through CSC Corporate Domains, Inc., with a creation date of January 6, 2018. It resolves to the IPv6 address 2a06:98c1:3120::3, hosted on Cloudflare’s infrastructure (AS13335) in the US. The SSL certificate is issued by Let’s Encrypt (E8), and the site appears on one security blocklist, PhishDestroy. Observed technologies include Framer Sites, React, HSTS, and HTTP/3, with a page title of 'Netcoins' and an HTTP 404 status at the time of assessment.

Users who interacted with logi-ntcoins-eng.framer.ai should immediately change any credentials entered on the site, enable two-factor authentication (2FA) on associated accounts, and monitor for unauthorized transactions or identity fraud. If cryptocurrency wallets were connected, revoke any token approvals and consider transferring funds to a new wallet. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in mitigation efforts.