lpbiacess[.]jacklyncito[.]com

Analysis of the domain lpbiacess.jacklyncito.com indicates an active phishing infrastructure targeting LANDBANK iAccess Retail Internet Banking users, as of July 12, 2026. The page title explicitly presents itself as 'LANDBANK iAccess Retail Internet Banking - Login,' confirming the intended brand impersonation. Infrastructure details reveal the domain was registered on February 21, 2026, through NameCheap, Inc., and currently resolves to the IP address 45.87.41.119, hosted on AS62068 SpectraIP B.V. in the Netherlands. The site returns an HTTP 302 redirect status, suggesting dynamic content handling or evasion techniques. No SSL certificate is present, increasing the likelihood of unencrypted credential transmission. Security vendors have flagged this domain on at least one blocklist, with Google Safe Browsing categorizing it under 'SOCIAL_ENGINEERING.' While 18 of 95 security vendors on VirusTotal detect the domain as malicious, the absence of additional context limits conclusions about the specific phishing kit or backend infrastructure. Nameservers dns1.registrar-servers.com and dns2.registrar-servers.com are associated with the domain, though their role in the campaign remains unclear. Defenders should treat this domain as high-risk due to its active status, confirmed brand impersonation, and detection by multiple security mechanisms. Network-level blocking of 45.87.41.119 and the domain itself is recommended, alongside monitoring for credential theft or follow-up attacks originating from this infrastructure. The lack of SSL and presence of a redirect warrant further investigation into potential evasion or data exfiltration methods. No evidence currently links this domain to broader campaigns or threat actor groups.