coinfire[.]net

coinfire.net is a phishing domain engaged in brand impersonation targeting users of the 'across' platform. The site posed as a legitimate trading platform under the false identity 'HOME | coinfire - USA best and smartest trading platform', attempting to deceive victims into disclosing sensitive information or engaging in fraudulent investment activities. No crypto drainer kit was identified, but the domain was actively used for investment scam purposes. As of the latest verification, coinfire.net has been taken offline.

Technical indicators confirm the elevated risk level of coinfire.net. The domain was flagged by 1 of 95 VirusTotal security vendors, specifically Gridinsoft, which assigned a trust score of 0/100. It appears on 1 security blocklist, PhishDestroy, and was found in 3 AlienVault OTX threat intelligence pulses. The domain was registered through arin, though the creation date is not available. It resolved to the IP address 172.67.140.140, hosted by Cloudflare, Inc. (AS13335) in the US, with no SSL certificate issued. Scamadviser assigned a trust score of 41/100, and the site was observed impersonating the 'across' brand.

Victims of coinfire.net should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized transactions or fraudulent activity. If financial or crypto assets were involved, users should review transaction histories and consider moving funds to a new, secure wallet. The domain can be reported to platforms like Google Safe Browsing, PhishTank, or the impersonated brand's security team for further investigation and takedown efforts.