negocio360[.]app

The domain negocio360.app is a generic phishing site designed to deceive users into downloading malicious content under the pretense of an Android application. It does not impersonate a specific brand or deploy a known crypto drainer kit. As of the latest verification, negocio360.app has been taken offline, though it previously posed an elevated risk of credential theft or malware distribution.

Technical indicators confirm the domain's malicious intent. Only 2 of 95 VirusTotal security vendors flagged negocio360.app, while Google Safe Browsing did not detect it. The domain appears on one security blocklist (PhishDestroy) and was registered through NiceNIC International Group Co., Limited on February 21, 2026. It resolved to the IP address 172.67.150.43, hosted by Cloudflare in the US, and used an SSL certificate issued by Google Trust Services (WE1). The observed page title was 'Negocio360 - Descarga para Android', and the site employed Cloudflare and HTTP/3 technologies. Gridinsoft assigned it a trust score of 0/100.

Users who interacted with negocio360.app should immediately scan their devices for malware and change any credentials entered on the site. Enable two-factor authentication (2FA) on all accounts as an additional security measure. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader threat mitigation. If financial or crypto accounts were accessed, monitor for unauthorized transactions and consider revoking token approvals.