icashloans.com 网络钓鱼与安全检查

The domain icashloans.com is currently active and returns HTTP 200 responses. DNS resolution points to IP 188.114.96.3, which is hosted within the Cloudflare network (AS13335) and located in the United States. The site presents a valid Let’s Encrypt certificate (R13) and runs on Nginx/OpenResty. Registration data shows the domain was created on March 14, 2005 and was purchased through NameCheap, Inc. Infrastructure analysis reveals a single authoritative nameserver and the domain appears on one public blocklist. Threat intelligence sources list the domain in two AlienVault OTX pulses and it is being blocked by PhishDestroy. The page title "ICashLoans.com - Personal Loans (Official Site)" does not match the advertised impersonation of Google, and the campaign is categorized as a tech‑support scam. VirusTotal has scanned the domain with 95 vendors and reported no detections, but the absence of detections is not evidence of safety. Given the combination of a valid SSL certificate, legitimate‑looking page title, and the explicit claim of Google impersonation, defenders should treat icashloans.com as a high‑confidence malicious actor. Recommended actions include adding the domain to URL filtering lists, monitoring outbound traffic for connections to the associated IP, and conducting content inspection if internal users access the site. Continuous threat‑intel correlation is advised to detect any evolution of the campaign.