wealthcoachforall[.]net

The domain wealthcoachforall.net is an active phishing site engaged in brand impersonation targeting Amazon. It presents itself as a legitimate service but is designed to deceive users into divulging personal or financial information through fraudulent login pages or forms. As of the latest verification, the site remains operational, posing an elevated risk to visitors who may mistake it for the genuine Amazon platform.

Technical indicators confirm the malicious nature of wealthcoachforall.net. The domain was registered on 2024-08-24 11:04:46 through NameSilo, LLC and resolves to the IP address 57.128.52.136, hosted on OVH SAS infrastructure in France. It is flagged by 1 of 95 VirusTotal security vendors and appears on 1 security blocklist (PhishDestroy). The SSL certificate is issued by DigiCert Inc under the 'Encryption Everywhere DV TLS CA - G2' authority. The site uses technologies including Google Cloud, Nginx, and Google Cloud CDN, and returns an HTTP 200 status with the page title 'Wealthcoachforall || Homepage'.

Users who may have interacted with wealthcoachforall.net should immediately change any credentials entered on the site, particularly Amazon-related passwords, and enable two-factor authentication (2FA) on their accounts. Monitor financial statements and account activity for unauthorized transactions. Report the domain to Amazon’s official phishing reporting channels and submit it to additional threat intelligence platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). If personal or financial data was exposed, consider contacting relevant institutions to secure accounts and prevent fraud.