# firstcoin.vip — SUSPICIOUS

> PhishDestroy has identified firstcoin.vip as a malicious phishing domain. This site was created to deceive users into revealing sensitive information. The threat report includes VirusTotal detection data and enriched threat intelligence.

## Summary
Threat Overview
The domain firstcoin.vip has been flagged as a phishing threat. PhishDestroy's automated scanning systems detected multiple risk indicators associated with this domain.
Detection Details
This domain was identified through a combination of automated analysis, community reports, and cross-referencing with global threat intelligence feeds including VirusTotal, Google Safe Browsing, and 50+ specialized blocklists.
Risk Indicators

- Domain registered on vip TLD
- Domain length: 13 characters

Stay Safe
Always verify URLs before entering credentials. Use a password manager to avoid typing passwords on fake sites. Enable two-factor authentication wherever possible.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 13.248.213.45
- IP Country: US
- IP City: Seattle
- IP Org: AS16509 Amazon.com, Inc.
- SSL Issuer: Go Daddy Secure Certificate Authority - G2

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0198e775-b4da-73b5-9913-5c0fe304b6a1.png
- PhishDestroy: https://phishdestroy.io/domain/firstcoin.vip/
- LLM endpoint: https://phishdestroy.io/domain/firstcoin.vip/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/firstcoin.vip/
Last updated: 2026-03-19