netcoiin-start-us[.]pages[.]dev

The domain netcoiin-start-us.pages.dev was flagged as a credential phishing site on July 24, 2026. Infrastructure analysis reveals that the domain resolves to the IP address 172.66.44.171, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain is registered through Cloudflare, Inc. and was created on February 21, 2026. The site is currently offline, returning an HTTP 403 status code, which typically indicates that the server understood the request but refuses to authorize it.

The domain's SSL certificate is issued by Google Trust Services and is valid. However, the Gridinsoft trust score for this domain is 0 out of 100, reflecting a very low level of trust. The domain also appears on one security blocklist, further corroborating its malicious nature. PhishDestroy has blocked access to the domain, indicating a recognized threat.

The page title of the site, when it was active, was 'Suspected phishing site | Cloudflare', which aligns with the credential phishing classification. Defenders should remain vigilant and ensure that any devices or networks that may have accessed this domain are checked for potential compromise. Given the offline status and the presence on security blocklists, it is advisable to monitor for any reactivation of the domain and to educate users about the risks associated with credential phishing attacks.