anubisqr57mqcf3vfqv3hknwbpux5ioqs6atmpwrqive6x7wrkdtrwyd[.]icu

This domain, anubisqr57mqcf3vfqv3hknwbpux5ioqs6atmpwrqive6x7wrkdtrwyd.icu, has been identified as an elevated-risk generic phishing threat. The page title 'Anubis Marketplace' suggests it may be masquerading as a legitimate online marketplace to lure unsuspecting users into revealing sensitive information.

Analysis indicates that the domain is flagged by 7 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 188.114.96.3. The domain appears on one security blocklist and has a Gridinsoft trust score of 5/100, indicating a very low level of trust. Additionally, the domain is mentioned in 2 threat intelligence pulses on AlienVault OTX and is blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services, which could be an attempt to appear more legitimate to users. The current status of the domain is offline, which may indicate that it has been taken down or is no longer active.

To mitigate the risk associated with this generic phishing threat, users should avoid clicking on links or entering any personal information on the domain. Network administrators should update their DNS and firewall rules to prevent access to the IP address 188.114.96.3. Security teams should also monitor for any related domains or IPs that may be used in subsequent attacks. Implementing multi-factor authentication and educating users on the signs of phishing can further reduce the risk of compromise.