# securekyc.net — SUSPICIOUS

> securekyc.net is under investigation for credential phishing. Avoid entering sensitive info and verify site legitimacy before proceeding.

## Summary
PhishDestroy has identified securekyc.net as a domain potentially involved in credential phishing activities, currently classified under an "under investigation" risk level. The domain presents a page titled "Sobranes — Verification Services," which may be used to impersonate legitimate verification processes and lure users into submitting sensitive credentials. Although no security vendors have flagged the domain yet, PhishDestroy urges caution due to the suspicious context and content.

From a technical perspective, securekyc.net was registered recently on March 6, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, which is a known registrar for potentially high-risk domains. The domain resolves to the IP address 104.21.36.54, associated with content delivery networks often exploited for malicious purposes. Despite the absence of detections on VirusTotal, the domain's age, hosting, and presentation strongly suggest further scrutiny is warranted.

Currently, securekyc.net remains active and unblocked by mainstream security tools, but PhishDestroy recommends users to avoid interacting with this domain, especially when prompted for personal or financial credentials. Security teams should consider monitoring this domain for emerging intelligence and applying internal network defenses to mitigate potential exposure. Continued observation and user education remain critical while the investigation progresses.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Sobranes — Verification Services

## Domain Intelligence
- Registered: 2026-03-06 00:00:00
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.36.54
- Nameservers: darwin.ns.cloudflare.com elisa.ns.cloudflare.com

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd15a-ba84-72be-a807-1a39ed8c78b3.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/163268c1-4981-4390-ac6f-7dc7df4422ed
- PhishDestroy: https://phishdestroy.io/domain/securekyc.net/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/securekyc.net/
Last updated: 2026-03-14