neotokyocitizens[.]codes

The domain neotokyocitizens.codes has been identified as a generic phishing site, specifically associated with banking phishing activity. There is no evidence that it impersonates a specific brand or uses a drainer kit. As of the latest assessment, the site is currently taken offline. Those searching whether neotokyocitizens.codes is safe or a scam should note that it has been flagged for phishing and is not considered secure.

Technical analysis shows that neotokyocitizens.codes was registered through NiceNIC International Group Co., Limited on February 21, 2026. The domain resolves to IP address 172.67.134.170, located in the US under AS13335 (Cloudflare, Inc.), and uses nameservers beth.ns.cloudflare.com and chase.ns.cloudflare.com. The SSL certificate was issued by Google Trust Services / WE1. Security scans indicate that 2 of 95 vendors on VirusTotal, including Fortinet and SOCRadar, have flagged this domain as malicious. Additionally, neotokyocitizens.codes appears on one security blocklist (PhishDestroy). Technologies detected on the site include HSTS, Cloudflare, and HTTP/3. The observed page title was 'Just a moment...'.

If credentials or banking information were entered on neotokyocitizens.codes, users should immediately change any associated passwords, enable two-factor authentication where possible, and monitor their accounts for unauthorized activity. It is also recommended to report any suspicious interactions with this domain to relevant security authorities or anti-phishing organizations to help prevent further incidents.