burnicu[.]icu

The domain burnicu.icu is currently active and has been flagged as malicious by 1 out of 91 vendors on VirusTotal. It is listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. Registered with HOSTINGER operations, UAB, the domain is hosted on IP address 198.251.83.106 in the United States, under the organization FranTech Solutions. Notably, the domain does not have an SSL certificate, which is often a red flag for phishing sites.

Despite the low detection rate on VirusTotal, the presence of burnicu.icu on multiple blocklists indicates its involvement in phishing activities. The domain was created on June 19, 2026, and PhishDestroy detected it just three days later on June 22, 2026. This quick detection highlights the efficiency of PhishDestroy's monitoring systems in identifying threats before they become widely recognized by antivirus vendors.

The absence of an SSL certificate suggests that burnicu.icu may be attempting to target users by mimicking legitimate websites without the security features that users expect. This lack of encryption can make it easier for attackers to intercept data or deceive users into providing sensitive information. The domain's association with FranTech Solutions, a hosting provider known for its lenient policies, may also contribute to its malicious use.

PhishDestroy's early detection of burnicu.icu underscores the importance of proactive threat intelligence. By identifying and blocklisting such domains swiftly, organizations can better protect themselves and their users from potential phishing attacks. The domain's rapid inclusion on multiple blocklists further emphasizes the need for continuous monitoring and updating of security measures.