# neverban.cc — MALICIOUS

> PhishDestroy identifies neverban.cc as a credential theft domain hosting a generic phishing page with an 18/95 VirusTotal detection rate. Take immediate caution.

## Summary
PhishDestroy identifies neverban.cc as an active credential theft domain posing a serious risk to users who may unknowingly submit sensitive credentials to its fraudulent pages.

This domain was flagged by 18 out of 95 VirusTotal security vendors, indicating widespread suspicion of its malicious intent. Registered through MAT BAO CORPORATION on February 03, 2026, the domain resolves to IP 103.110.84.5 and utilizes a Let's Encrypt SSL certificate to appear legitimate. Its recent creation date and low trust scores further suggest a hastily deployed operation likely targeting unsuspecting victims.

To mitigate exposure to this credential theft domain, organizations and individuals should block both the domain and its associated IP address at the network perimeter. Users should avoid interacting with any links or forms hosted on neverban.cc and report the domain to their IT security teams or relevant abuse channels. Enabling multi-factor authentication (MFA) on all accounts can also reduce the impact of credential compromise if credentials are inadvertently exposed.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-03 14:11:52
- Registrar: MAT BAO CORPORATION
- IP: 103.110.84.5

## Detection Status
- VirusTotal: 18 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/bd55e441-a939-4c93-b587-d181f5ea5356
- PhishDestroy: https://phishdestroy.io/domain/neverban.cc/
- LLM endpoint: https://phishdestroy.io/domain/neverban.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/neverban.cc/
Last updated: 2026-03-29