en-g-netcons-sso[.]square[.]site

This domain is a phishing site designed to impersonate the legitimate Netcoins cryptocurrency platform login portal. Analysis of the page title, 'netcoins® | Starting Up Your Device | netcoins login® | Netcoins,' confirms it mimics the official Netcoins authentication interface to deceive users into entering sensitive credentials, including usernames, passwords, and potentially two-factor authentication codes. The site specifically targets individuals attempting to access their cryptocurrency accounts, posing a direct risk of financial theft and unauthorized account access. Infrastructure analysis reveals the domain en-g-netcons-sso.square.site was registered on February 05, 2019, through MarkMonitor, Inc., and currently resolves to the IP address 74.115.51.5, hosted on AS27647 (Weebly, Inc.). The domain has been flagged by 17 out of 95 security vendors on VirusTotal, indicating a high level of detection across multiple threat intelligence platforms. Additionally, it appears on two security blocklists, and its SSL certificate, issued by Let's Encrypt (serial number E7), does not mitigate the malicious intent of the site. The combination of these technical indicators confirms the domain's fraudulent nature. If a user has visited en-g-netcons-sso.square.site or entered credentials on this site, immediate action is required. First, revoke any active sessions on the legitimate Netcoins platform and change the account password using a secure device. Enable multi-factor authentication if not already active. Monitor the account for unauthorized transactions or suspicious activity and report any anomalies to the official support team. Additionally, scan the device used to access the phishing site for malware, as phishing pages may deploy additional payloads. Users should also consider notifying their financial institutions if cryptocurrency transactions were attempted or completed during the compromise window.