# qoinbes-login.pages.dev — SUSPICIOUS

> qoinbes-login.pages.dev is a crypto drainer credential theft site flagged by 1 of 95 VirusTotal vendors. Avoid entering any credentials here.

## Summary
PhishDestroy identifies qoinbes-login.pages.dev as an active credential phishing domain impersonating QoinBES. The site is currently live and distributing malicious content designed to harvest user login credentials.

This domain was flagged by 1 of 95 VirusTotal security vendors, operates under Cloudflare, Inc. as the registrar, and resolves to IP address 188.114.96.3. Google Safe Browsing classifies this domain under SOCIAL_ENGINEERING. It appears on 2 security blocklists and is blocked by SEAL and MetaMask. The domain utilizes a Google Trust Services SSL certificate, indicating a false sense of legitimacy despite its malicious nature.

Given the elevated risk level and active credential theft operations, PhishDestroy recommends avoiding interaction with this domain entirely. Users should verify website authenticity through official channels and employ browser security extensions to block access. If credentials were accidentally entered, immediately change passwords and enable multi-factor authentication on all associated accounts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["SEAL", "MetaMask"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/e7f4ab2c-7fc1-4c64-a390-0c02c9f3fb26
- PhishDestroy: https://phishdestroy.io/domain/qoinbes-login.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/qoinbes-login.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/qoinbes-login.pages.dev/
Last updated: 2026-03-22