mogcoins-xyz[.]pages[.]dev

Analysis indicates that the domain mogcoins-xyz.pages.dev was created on June 08 2026 and currently resolves to IP 172.66.44.103, an address assigned to Cloudflare, Inc. in Canada. The site presents an HTTPS certificate issued by Google Trust Services under the WE1 authority, and the server advertises HSTS and HTTP/3 support, consistent with Cloudflare infrastructure. HTTP requests return a 200 status code and the page title is reported as “Mog Coin”. VirusTotal has recorded 16 detections out of 91 scanners, and the domain appears on three public blocklists, specifically PhishDestroy, ScamSniffer, and Enkrypt. The Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment. The threat is classified as generic_phishing with a high risk rating; the domain remains active as of the report date. Evidence confirms that the infrastructure is actively hosting a phishing payload, but the exact content of the page has not been publicly disclosed. Defenders should block the domain at network perimeter, update DNS filtering policies to include the listed blocklists, and monitor for any outbound connections to the associated IP. Additional scrutiny of traffic to Cloudflare‑hosted assets is advised, and any credentials entered on the site should be considered compromised. Ongoing observation is recommended to detect potential evolution of the campaign.