ntcoin[.]zapier[.]app

This domain, ntcoin.zapier.app, is identified as a generic phishing threat targeting users of the legitimate cryptocurrency platform NetCoins®. Analysis of the page title, 'Log In | NetCoins®,' indicates an attempt to deceive victims into entering sensitive credentials by impersonating the official login portal. The domain does not appear to be associated with a known drainer kit based on available intelligence, but its infrastructure and design are consistent with credential-harvesting phishing campaigns. Infrastructure analysis reveals several critical technical indicators. The domain was registered on February 21, 2026, through Name.com, Inc., and resolves to the IP address 64.239.123.129, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The SSL certificate is issued by Let's Encrypt (R12), a common tactic to lend false legitimacy to phishing sites. VirusTotal detection metrics show 17 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. Google Safe Browsing (GSB) status is not explicitly provided, but the elevated detection rate suggests broad recognition of its malicious nature. The domain is currently offline, reducing immediate risk to end users. However, the infrastructure remains registered and could be reactivated or repurposed for future phishing campaigns. The creation date in 2026 is anomalous, suggesting either a typo in registration records or an attempt to evade detection by appearing as a future domain. Users who may have interacted with this domain are advised to reset credentials immediately, enable multi-factor authentication on all financial accounts, and monitor for unauthorized transactions. Organizations should block the domain and IP at the network level and conduct internal audits for potential exposure.