produecvisitilink[.]iceiy[.]com

The domain produecvisitilink.iceiy.com was first observed on July 12, 2026 and is currently classified as a high‑risk generic_phishing site targeting account takeover. Its status remains active despite the page title reporting "Domain Suspended". The domain was registered on December 06, 2020 through Porkbun LLC and continues to resolve to a single IPv4 address.

Infrastructure analysis shows the domain resolves to 77.72.1.44, an address hosted in Great Britain and assigned to AS12488 (Krystal Hosting Ltd). The authoritative name servers are ns1.byet.org through ns5.byet.org, and the MX record points to mx.iceiy.com with a priority of 5. An SSL certificate issued by ZeroSSL ECC Domain Secure Site CA is present, and HTTP requests return a 200 status code, indicating the web service is reachable.

Threat intelligence indicates the domain appears on two public blocklists, PhishDestroy and PhishingDB, and 12 of 95 security vendors on VirusTotal have flagged it as malicious. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The page title "Domain Suspended" likely reflects a placeholder or takedown notice rather than a legitimate content indicator, and no further page analysis is available.

Defenders should prioritize blocking both the domain and its resolved IP address at perimeter defenses. Continuous monitoring of the associated name servers and MX host is advised, as they may be leveraged for additional phishing or credential‑harvesting campaigns. Updating threat feeds with the observed indicators—domain, IP, SSL fingerprint, and blocklist entries—will help mitigate the risk of account takeover attempts originating from this infrastructure.