portal-neetcoin[.]com

Analysis indicates that portal-neetcoin.com is an active brand-impersonation domain targeting users of a cryptocurrency analytics platform. The domain was registered on February 21, 2026, through a registrar based in Vietnam and currently resolves to a Cloudflare IP address (172.67.217.102) within autonomous system AS13335. The site returns an HTTP 200 status, suggesting it is fully operational, and presents a page titled '$NEET - Not in Employment, Education, or Training,' which does not align with the expected content of the targeted platform. Infrastructure analysis reveals the use of Cloudflare services, including Browser Insights and HTTP/3, and nameservers hosted under Cloudflare (gordon.ns.cloudflare.com and wally.ns.cloudflare.com). The SSL certificate is issued by Google Trust Services, which does not inherently indicate malicious activity but is consistent with many fraudulent sites leveraging legitimate CDN infrastructure. The domain is blocked by at least two security vendors, including PhishDestroy and ScamSniffer, and is flagged by 2 of 93 security engines in a recent scan. A trust score of 0/100 further supports the assessment of high risk. While the exact content and functionality of the site remain unconfirmed, the available evidence—including the mismatch between the page title and the impersonated brand, the recent registration date, and the presence on multiple blocklists—strongly suggests an intent to deceive users seeking cryptocurrency data. Defenders should treat this domain as malicious and prioritize blocking or monitoring traffic to it. Further investigation into associated wallet addresses or redirect chains may be warranted to assess the full scope of the threat.