# secure-netcoiins-app.pages.dev — MALICIOUS

> secure-netcoiins-app.pages.dev is flagged for credential phishing risks. Avoid sharing personal info. Check its status and stay safe with PhishDestroy.

## Summary
PhishDestroy identifies the domain secure-netcoiins-app.pages.dev as a high-risk credential phishing site. The domain was registered on February 21, 2026, and was designed to deceive users into divulging sensitive login information, potentially compromising personal and financial security.

Technical analysis shows that this domain was registered through Cloudflare, Inc. and was actively flagged by 15 out of 95 security vendors on VirusTotal. It also appeared on two separate security blocklists, indicating consistent detection across multiple threat intelligence sources. The use of the Cloudflare platform suggests an attempt to obscure hosting details and evade immediate takedown.

Currently, secure-netcoiins-app.pages.dev is offline, reflecting a likely takedown or suspension in response to its malicious activity. Users are advised to remain cautious of similar lookalike domains and refrain from entering credentials on suspicious sites. PhishDestroy continues monitoring such threats to aid users in maintaining online security.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.44.115
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["aurora.ns.cloudflare.com", "edward.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "Criminal IP", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Phishing Database", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c9065-c95b-7521-9326-f92d1d212248.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/7f7b7776-096a-43e5-b363-491750850a49
- PhishDestroy: https://phishdestroy.io/domain/secure-netcoiins-app.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/secure-netcoiins-app.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/secure-netcoiins-app.pages.dev/
Last updated: 2026-03-19