app[.]iwebcoins[.]com

Analysis of app.iwebcoins.com based on available intelligence as of July 27 2026 indicates that the domain was registered through GoDaddy.com, LLC on 12 January 2025 and is serviced by Cloudflare DNS using the authoritative name servers aryanna.ns.cloudflare.com and donovan.ns.cloudflare.com. The domain resolves to the IPv4 address 104.21.91.64, which is part of Cloudflare’s edge network and therefore does not reveal a dedicated hosting provider or autonomous system beyond the provider‑level attribution. The domain is currently active and appears on a single external blocklist; it has been specifically listed by PhishDestroy, confirming that at least one anti‑phishing organization has observed malicious activity associated with the host.

VirusTotal records show that the domain was scanned by 91 security vendors, none of which reported a detection at the time of the scan. While the lack of detections does not constitute a safety guarantee, it indicates that no known signatures or heuristics have flagged the domain as malicious up to the scan date. No public Safe Browsing, OTX, SSL certificate, HTTP status, or page‑title information is present in the supplied data, and no evidence of brand impersonation or specific phishing kit has been disclosed.

Consequently, the confidence level of the phishing classification relies primarily on the blocklist entry and the generic labeling of the threat type. Defenders should consider adding 104.21.91.64 to network‑level deny lists, enforcing DNS filtering that blocks app.iwebcoins.com, and monitoring for any new signatures that may emerge from future VirusTotal or sandbox analyses. Continuous re‑evaluation is recommended, especially if the domain begins serving content that triggers detection engines or if additional intelligence such as page snapshots, certificate details, or user‑reported incidents become available.