marsteamstar[.]vip

This domain is assessed at under_investigation risk level with a threat classification of generic_phishing. The domain does not target a specific brand but exhibits characteristics consistent with broad phishing campaigns, such as deceptive registration patterns and lack of legitimate content.

Infrastructure analysis reveals the domain resolves to IP address 172.67.212.8 and was created on June 25, 2026. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal reports 0 out of 95 security vendors detecting the domain as malicious. No blocklist entries or trust scores are available in the provided intelligence, and the domain status remains active.

Mitigation steps specific to generic phishing include blocking the domain at the network perimeter, monitoring for similar domain registrations from the same registrar, and educating users to avoid interacting with unsolicited emails or messages linking to unknown domains. Organizations should implement email filtering rules to quarantine messages containing this domain and review web proxy logs for any connections to the IP 172.67.212.8.