icbc[.]com-applp[.]cc

The domain icbc.com-applp.cc was registered on 12 June 2026 through Gname.com Pte. Ltd. and is served from the Cloudflare nameservers marty.ns.cloudflare.com and surina.ns.cloudflare.com. DNS resolution points to IP address 104.21.55.204, a Cloudflare edge node that is commonly leveraged for fast‑flux and abuse hosting. The domain appears on a single external blocklist and has been actively blocked by the PhishDestroy feed, indicating that at least one anti‑phishing service has observed malicious activity associated with it.

VirusTotal reports that 12 of 91 scanned security vendors flag the domain as malicious, a detection ratio that exceeds typical background noise and suggests that automated scanners have identified phishing‑related payloads or URLs. No additional public intelligence such as page titles, SSL certificate details, or HTTP response codes is currently available, leaving the exact content of the site unverified. However, the combination of recent registration, Cloudflare‑based hosting, blocklist presence, and multi‑vendor detection points to a high probability that the domain is being used for credential‑harvesting or other phishing campaigns.

Defenders should add icbc.com-applp.cc to outbound web filtering rules, ensure that internal DNS resolvers block the associated IP range, and monitor for any outbound connections to the address. Continuous re‑scanning with VirusTotal and inclusion in threat‑intel feeds is recommended to capture any evolution of the payload or additional indicators of compromise.