dashboard-icn[.]xyz

This domain dashboard-icn.xyz was registered on March 26, 2026 through Dynadot LLC with nameservers jack.ns.cloudflare.com and karina.ns.cloudflare.com. It resolves to IP 188.114.97.3 in Canada under CloudFlare infrastructure. The domain carries a Gridinsoft trust score of 0/100, appears on three security blocklists, and returns an HTTP status of 403. VirusTotal reports four detections out of 95 vendors while AlienVault OTX lists it in one threat intelligence pulse. The SSL certificate originates from Let's Encrypt with serial E8. Classification identifies the domain under generic phishing with streaming scam attributes and high risk level, remaining active as of July 12, 2026.

Infrastructure analysis reveals consistent CloudFlare resolution and multiple vendor blocks from PhishDestroy, MetaMask, and SEAL. The 403 response limits direct observation of hosted content yet does not alter the accumulated blocklist and detection metrics. Registration age of roughly three and a half months aligns with patterns observed in similar infrastructure. No additional ASN or geolocation details beyond the listed IP are recorded.

Defenders should incorporate the exact domain and IP 188.114.97.3 into firewall and DNS block rules while monitoring for changes in nameserver delegation or new resolutions. Continued observation of the three blocklists and the single OTX pulse provides ongoing validation. Any shift from 403 status warrants immediate re-examination of HTTP headers and certificate transparency logs for related indicators.