iqir7-6yaaa-aaaag-atzfa-cai[.]icp0[.]io

The domain iqir7-6yaaa-aaaag-atzfa-cai.icp0.io has been identified as posing a generic phishing threat. It does not impersonate any specific brand, nor does it utilize a drainer kit. The site has been taken offline, indicating an elevated risk level. Users querying whether iqir7-6yaaa-aaaag-atzfa-cai.icp0.io is safe or a scam should be aware that it was involved in phishing activities.

Technical indicators for iqir7-6yaaa-aaaag-atzfa-cai.icp0.io include detections by 3 of 95 security vendors on VirusTotal, specifically CRDF, DNS8, and Trustwave. The domain was created on September 6, 2022, and was registered through GoDaddy.com, LLC. It resolves to the IP address 2602:fb2b:110:1:bcfb:b8ff:fe09:c741, located in Germany under AS398485 DFINITY USA Research, LLC. The domain appears on one security blocklist, PhishDestroy, and uses an SSL certificate issued by Let's Encrypt / E7. The page title observed was 'Hyperlane Lombard Bridge', and the HTTP status returned was 503.

For those who may have interacted with iqir7-6yaaa-aaaag-atzfa-cai.icp0.io, it is advisable to change any passwords and enable two-factor authentication on accounts that may have been compromised. Additionally, users should monitor for any unauthorized transactions or fraudulent activities. Reporting the phishing attempt to services such as PhishDestroy can help prevent further exploitation. Ensuring that security measures are in place will mitigate the risks associated with phishing scams.