hn2pawxhwytyhtexin3x65q2aza2q7zknrybeujpsy2524r789cdxxad[.]icu

The domain hn2pawxhwytyhtexin3x65q2aza2q7zknrybeujpsy2524r789cdxxad.icu is identified as a high-risk credential theft phishing site and is currently active. The page title 'WeTheNorth Market' suggests a possible impersonation of a legitimate brand, potentially targeting users of a known market or e-commerce platform.

Analysis indicates that the domain is flagged by 2 out of 95 VirusTotal vendors, suggesting a low but notable detection rate. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 104.21.6.121. It appears on 1 security blocklist, specifically PhishDestroy, indicating that it has been identified and marked as malicious by at least one security service. The SSL certificate is issued by Google Trust Services under the WE1 label, which might be used to gain user trust.

The current status of the domain is active, and it remains a potential threat to unsuspecting users. Security experts recommend that users avoid accessing this domain and report any related phishing attempts to their respective security teams. Network administrators should consider blocking this domain at the DNS level to prevent access from within their networks. Additionally, users should be cautious of any links or emails that direct them to this domain and should verify the legitimacy of any website requesting sensitive information.