darkmaukfefhpyw6sexqzeg47rtxjxkhz7ilq2zfhhuasuj58phwqnid[.]icu

The domain darkmaukfefhpyw6sexqzeg47rtxjxkhz7ilq2zfhhuasuj58phwqnid.icu is identified as an elevated-risk generic phishing threat and is currently offline. This domain does not impersonate any specific brand but poses a significant threat to users who may encounter it.

Analysis indicates that the domain darkmaukfefhpyw6sexqzeg47rtxjxkhz7ilq2zfhhuasuj58phwqnid.icu was flagged by 5 out of 95 security vendors on VirusTotal, suggesting a moderate level of suspicion. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 104.21.47.156. The SSL certificate is issued by Google Trust Services, which may be used to lend credibility to the site. The Gridinsoft trust score for this domain is 5 out of 100, indicating a very low level of trust. The domain has been included in 2 threat intelligence pulses on AlienVault OTX and appears on 1 security blocklist. Additionally, the domain has been blocked by PhishDestroy, further confirming its phishing nature.

The current status of the domain is offline, which may indicate that it has been taken down by authorities or the hosting service. However, users and organizations should remain vigilant as the domain could be reactivated. Security teams are advised to update their blocklists and ensure that network defenses are configured to detect and block any future activity from this domain. Users should be educated on the signs of phishing and encouraged to report any suspicious activity to their IT departments.