netcion-en[.]pages[.]dev

PhishDestroy has identified netcion-en.pages.dev as a brand impersonation threat targeting the Investment Scam brand. The domain is actively hosting a fraudulent page titled "Netcoin® Login | Secure & Easy Crypto Trading Platform®" designed to deceive users into believing they are accessing a legitimate crypto trading service. This is a high-risk phishing operation aimed at stealing sensitive information and funds from victims.

Technical analysis reveals that the domain is flagged by 3 out of 95 security vendors on VirusTotal, indicating moderate detection. It is registered through Cloudflare, Inc. and resolves to IP address 172.66.47.200. The domain was created on April 04, 2026, and its SSL certificate is issued by Google Trust Services / WE1. The domain appears on 1 security blocklist, and Google Safe Browsing status is not explicitly mentioned but should be considered compromised given the threat profile.

The domain remains active and poses an ongoing risk to internet users. PhishDestroy recommends that users avoid any interaction with netcion-en.pages.dev and report it to relevant authorities. Organizations should block access to this domain and educate users about investment scam impersonation tactics. Immediate takedown requests should be submitted to Cloudflare and the hosting provider to mitigate further harm.