valotb[.]icu

PhishDestroy has identified valotb.icu as a generic phishing domain currently active and posing a high risk. The domain's page title is 'Access Verification', a common lure to harvest credentials. No specific brand is impersonated, but the generic nature increases the likelihood of targeted attacks.

Threat intelligence reveals valotb.icu was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to IP 94.183.188.179 and is flagged by 12 out of 95 VirusTotal vendors, indicating strong malicious consensus. The domain appears on one security blocklist and has been found in one AlienVault OTX pulse, suggesting active threat intelligence interest. The SSL certificate is issued by Let's Encrypt (R13), which is typical for both legitimate and malicious sites.

As the domain remains active, immediate blocking at the network level is recommended. Users encountering valotb.icu should not interact with the page or enter any credentials. Organizations should update their blocklists and educate users to recognize generic verification prompts as potential phishing. Continuous monitoring is advised, as the domain may be used in broader campaigns.