icbc[.]com-applo[.]cc

Analysis as of July 29 2026 indicates that icbc.com-applo.cc is an active generic phishing infrastructure with elevated risk. The domain was registered on June 12 2026 through Gname.com Pte. Ltd. and is hosted on the IP address 188.114.96.3, which is served by Cloudflare as evidenced by the authoritative nameservers marty.ns.cloudflare.com and surina.ns.cloudflare.com. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service.

VirusTotal reports that twelve of ninety‑one scanning engines have flagged the domain, demonstrating a moderate detection consensus. No additional public intelligence such as Safe Browsing verdicts, OTX tags, or SSL certificate details are available at this time. The limited detection footprint suggests that the site may be newly deployed or employing evasion techniques, but the presence on a blocklist and multiple vendor detections confirm malicious intent.

Defenders should add icbc.com-applo.cc to URL filtering and DNS block lists, monitor traffic to the associated IP address 188.114.96.3, and consider enforcing sink‑hole or sink‑routing for the Cloudflare nameservers to disrupt resolution. Continuous re‑scanning on VirusTotal and inclusion in threat‑intel feeds are recommended to capture any evolution of the campaign. Organizations that receive suspicious communications referencing the icbc.com domain should treat any links to the applo.cc sub‑domain as malicious and educate users to avoid credential submission.