idcheck-go[.]com

Analysis shows that idcheck-go.com was registered on April 16, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently hosted on the Vercel network, resolving to the IP address 76.76.21.21 located in the United States. The site presents a valid Let’s Encrypt certificate (R13) and returns HTTP 200 responses. The page title observed is “IDCHECK‑GO.COM - A Dub Custom Domain | Dub”, indicating no obvious brand affiliation.

Threat intelligence sources flag the domain as malicious. It appears on a single security blocklist and is listed in an AlienVault OTX pulse, confirming prior detection by the community. The Gridinsoft trust score is 0 out of 100, and VirusTotal records two positive detections out of ninety‑five scanners. PhishDestroy has actively blocked the domain, reinforcing its classification as a high‑risk phishing resource.

Defenders should incorporate idcheck-go.com into perimeter filtering and endpoint blocking policies, especially on networks that permit outbound connections to Vercel‑hosted services. Continuous monitoring of DNS queries for the 76.76.21.21 address is advised, as the infrastructure could be leveraged for additional malicious payloads. Because only the page title has been examined, the exact phishing lure and credential‑capture mechanisms remain unknown; further sandbox or manual inspection is recommended to determine the full attack surface.

At present no evidence points to a specific victim demographic or targeted brand, and the site’s content has not been captured beyond the title. This uncertainty underscores the need for rapid response: isolate any traffic to the domain, quarantine potential credential submissions, and update threat intelligence feeds with the observed indicators (domain, IP, certificate fingerprint). Ongoing review of any new detections will help gauge whether the operator expands the campaign.