viber[.]click

This domain is flagged as high-risk phishing infrastructure and remains active as of August 05, 2026. The domain viber.click was created on April 08, 2019, and is registered through NAMECHEAP INC. It resolves to IP address 81.177.136.113. Infrastructure analysis shows the domain uses nameservers ns1.jino.ru, ns2.jino.ru, ns3.jino.ru, and ns4.jino.ru, which are associated with Jino, a Russian hosting provider, though the specific hosting ASN is not identified in the available data.

VirusTotal reporting indicates that 1 out of 91 security vendors flag this domain as malicious, which is a low but non-zero detection rate, suggesting that the threat may be under-recognized by many security products. The domain appears on two security blocklists and is specifically blocked by PhishDestroy and MetaMask, the latter indicating potential use in crypto-related phishing or scam operations, although the exact scam type has not been confirmed. The page content itself has not been analyzed, so the brand impersonated, if any, is unverified; the domain name suggests possible association with the Viber messaging service, but no evidence confirms this link. The low vendor detection count combined with active blocklist presence and high-risk classification points to a domain that is likely used for targeted phishing campaigns rather than widespread spam, which may explain the limited vendor coverage.

Defenders should treat any communication or link from viber.click as malicious, block the domain and its IP at network and email gateways, and monitor for related subdomains or changes in infrastructure. Users who have interacted with the domain should change credentials on any potentially affected accounts and enable two-factor authentication. The domain's age (registered in 2019) and current active status suggest long-term operation, increasing the credibility of its phishing infrastructure.