marsbahis-erisim2026[.]icu

Analysis of marsbahis-erisim2026.icu shows a domain registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and created on 31 July 2026. The domain is currently classified as a generic phishing threat and is listed as active, with its risk level marked under investigation. It has been added to the PhishDestroy blocklist and appears on a single external security blocklist. VirusTotal records indicate that the domain was scanned by 91 antivirus and URL‑reputation vendors; none reported a detection at the time of scanning.

The absence of detections does not constitute a safety guarantee, as many phishing infrastructures evade automated signatures. No public information is available regarding the hosting IP address, autonomous system number, SSL certificate details, HTTP response codes, or page title, leaving the underlying infrastructure and any affiliated domains unknown. Defenders should proactively deny network communications to marsbahis-erisim2026.icu, include it in URL filtering policies, and monitor DNS query logs for attempts to resolve the domain. Continuous re‑scanning on VirusTotal or similar platforms is recommended to capture any future detections.

Correlation with internal proxy or email logs may reveal exploitation attempts. Security teams should also verify whether any credential‑phishing templates are hosted on the domain by performing manual HTTP requests in a sandboxed environment, and should share any observed indicators of compromise with relevant information‑sharing groups. Given the recent creation date and existing blocklist entries, the domain should be treated as malicious until further evidence proves otherwise.