track[.]tumorbiologie[.]info

The domain track.tumorbiologie.info has been identified as a generic phishing domain, specifically a fake login site. The page title, 'Oferta specjalna: 90–95% taniej,' suggests that the domain may be attempting to lure victims with a misleading offer, potentially impersonating a legitimate brand to gather sensitive information.

Infrastructure analysis reveals that the domain is registered through NameSilo, LLC and resolves to the IP address 104.21.77.101, which is located in the United States and is associated with Cloudflare, Inc. (AS13335). The domain has an SSL certificate issued by Google Trust Services / WE1, which might be used to gain trust from unsuspecting users. According to VirusTotal, 20 out of 95 security vendors flag this domain as malicious. The domain also appears on 1 security blocklist and is currently blocked by PhishDestroy. The Google Safe Browsing (GSB) status indicates that the domain has been taken offline, likely due to security actions.

The current status of the domain is offline, which reduces the immediate risk of active phishing attacks. However, the domain remains a potential threat as it could be reactivated. Organizations and individuals are advised to avoid visiting this domain and to implement DNS filtering or web proxy solutions to prevent accidental access. Security teams should monitor for any signs of the domain being brought back online and update their threat intelligence databases accordingly.