alabama[.]mobile-bcm[.]vip

The domain alabama.mobile-bcm.vip was registered on June 12, 2026 through Gname.com Pte. Ltd. and is hosted on the IP address 188.114.96.3. Its authoritative name servers are nataly.ns.cloudflare.com and cesar.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, which suggests that threat‑intelligence feeds have identified it as malicious.

VirusTotal scans show that nine out of ninety‑one security vendors have flagged the domain, providing modest but non‑trivial detection confidence. The combination of recent registration, Cloudflare name servers, and multiple vendor detections aligns with typical patterns observed in newly created phishing infrastructure. However, no public page title, SSL certificate details, HTTP response codes, or content analysis have been disclosed, leaving the exact phishing payload and targeted brand undefined.

Defenders should treat the domain as hostile: block DNS resolution for alabama.mobile-bcm.vip at the network perimeter, add the address 188.114.96.3 to endpoint allow‑list exclusions, and monitor for any outbound connections to that IP. Continued observation of threat‑intel feeds for additional detections or content disclosures is recommended, as further evidence may clarify the specific phishing campaign and victim profile.