cryptanatomy[.]icu

The domain cryptanatomy.icu is currently active and confirmed as a phishing site impersonating the Dogpile search engine. Analysis indicates this infrastructure is designed to deceive users into interacting with fraudulent search results, likely leading to further malicious redirections or credential harvesting. The domain presents itself under the title 'Dogpile - Search Engine,' a direct attempt to mimic the legitimate search service and exploit user trust in recognizable brands. Infrastructure analysis reveals the domain was registered on June 28, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.96.3, which has been linked to other suspicious activities. The domain is flagged by 5 of 95 security vendors on VirusTotal, indicating moderate but consistent detection across threat intelligence platforms. Additionally, it appears in one AlienVault OTX threat intelligence pulse, further corroborating its malicious classification. The SSL certificate is issued by Google Trust Services, which, while legitimate, is commonly abused by threat actors to lend a false sense of security to victims. Current status remains active, posing a high risk to users who may unknowingly engage with the fraudulent search interface. Immediate action is recommended: network administrators should block the domain and its associated IP at the perimeter level, while endpoint protection systems should be updated to recognize and quarantine any connections to cryptanatomy.icu. Users are advised to verify the authenticity of search engines by checking the URL and SSL certificate details before interaction. Organizations should monitor for any internal traffic to this domain and investigate potential exposure or compromise.