itdealcc[.]bond

Analysis of the domain itdealcc.bond shows a newly registered infrastructure that is actively being used for a generic phishing operation. The domain was created on July 20, 2026 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. Authoritative name servers listed are destiny.ns.cloudflare.com and keenan.ns.cloudflare.com, indicating the domain is hosted behind Cloudflare’s network.

DNS resolution points to the IP address 188.114.96.3, which is owned by Cloudflare and therefore masks the true origin of the web server. VirusTotal records indicate that the domain has been scanned by 91 security vendors, none of which flagged the site at the time of scanning; however, the absence of detections does not constitute evidence of safety. The domain appears on a single external blocklist and is specifically listed by PhishDestroy as a phishing source, confirming that at least one reputable security service has identified malicious activity associated with the domain.

No additional intelligence such as SSL certificate details, HTTP response codes, page title, or brand targeting is available, leaving the exact content and lure technique unconfirmed. Defenders should treat the domain as malicious despite the lack of detections, block network communications to 188.114.96.3, add it to local deny lists, and monitor for any related indicators of compromise that reference the Cloudflare name servers or the registrar. Ongoing observation is recommended to capture any future changes in detection status, blocklist listings, or content analysis that could refine the threat profile.