promo-game[.]icu

Analysis of the domain promo-game.icu indicates it is an active phishing site registered on August 26, 2025, through Web Commerce Communications Limited dba WebNic.cc. The domain resolves to the IP address 193.187.110.3 and is currently operational, presenting a page titled 'Loading,' a common tactic to delay or obscure malicious activity while scripts or redirects execute. The SSL certificate is issued by Let's Encrypt, which does not imply legitimacy but is frequently used by threat actors to evade browser security warnings. Threat intelligence platforms confirm its malicious classification: AlienVault OTX lists the domain in two distinct threat pulses, and six of 95 security vendors on VirusTotal flag it as malicious. The exact nature of the phishing campaign remains unconfirmed, as the page title 'Loading' does not reveal a specific brand or scam type. No additional infrastructure details, such as ASN or hosting country, are available for further context. Defenders should treat this domain as high-risk and block it at the DNS or network level. Monitoring for connections to 193.187.110.3 may help identify compromised hosts. Given its active status and lack of legitimate purpose, immediate containment is recommended. Further analysis of network traffic or endpoint logs may reveal the final payload or target demographic.