icbc[.]mobile-jvk[.]cc

On July 29, 2026, the domain icbc.mobile-jvk.cc was identified as an elevated risk phishing domain. This domain resolves to the IP address 188.114.96.3 and has been flagged by 13 out of 91 security vendors on VirusTotal, indicating a significant level of suspicion. The domain was registered through Porkbun LLC on June 12, 2026, and currently appears on one security blocklist, specifically PhishDestroy. The exact content of the website has not yet been analyzed, but the domain's association with a known blocklist and multiple security vendor flags suggest it is actively used for phishing attacks.

Infrastructure analysis reveals that the domain is hosted on a single IP address, which may indicate a dedicated server or a smaller-scale operation. Given the elevated risk level, defenders are advised to block this domain at the network level and educate users about the potential dangers of accessing unknown or flagged websites. Additionally, monitoring for any related domains or IP addresses is recommended to prevent further phishing activities.

The domain's creation date and registration details provide a timeline for when it became active, helping in the identification of any associated campaigns or incidents. While the domain does not appear to have an SSL certificate or specific trust scores, the combined evidence from security vendors and blocklists strongly supports its classification as a phishing domain. Organizations should remain vigilant and implement additional layers of security to protect against such threats.