limanbet-bul[.]icu

The domain limanbet-bul.icu is currently classified as a high-risk threat, specifically flagged for generic phishing activities. The domain was created on June 17, 2026, and is still active as of the report date, July 12, 2026. It resolves to the IP address 188.114.96.3, which ties into known malicious infrastructure. A significant indicator of its malicious intent is the fact that it is recognized within 15 threat intelligence pulses on AlienVault OTX, indicating a broad consensus among security researchers about its harmful nature.

Security analysis using VirusTotal reveals that 5 out of 95 security vendors have flagged this domain, which, while not overwhelming, does contribute to the assessment of its risk level. The domain has received a low trust score of 0 from Gridinsoft, which further underscores the potential dangers associated with it. Additionally, it has been blocked by known defensive measures such as PhishDestroy and BLP-Malware, reinforcing the notion that security practitioners have identified this domain as a threat.

The SSL certificate for this domain is issued by Google Trust Services, which can sometimes create an illusion of safety for users who might not be aware of the underlying malicious activities. Security professionals should remain vigilant, as the title of the page found on limanbet-bul.icu is ‘Nur einen Moment…’, a common tactic in phishing to delay user engagement.

Defenders are advised to implement comprehensive blocking measures against this domain across all organizational networks. Continuous monitoring of threat intelligence sources and updating security protocols in response to emergent threats associated with this domain will be essential in mitigating the risk associated with limanbet-bul.icu. Ensuring that users are educated about the risks of clicking on links from unknown sources would further enhance organizational defenses.