citymtntdj32ztac3mendod2ld6sq2234u4pysspxo4o5stk57ssz5qd[.]icu

The domain citymtntdj32ztac3mendod2ld6sq2234u4pysspxo4o5stk57ssz5qd.icu is identified as a high-risk generic phishing threat. Its primary purpose appears to be associated with tricking users into divulging sensitive information. No specific brand is being impersonated at this time, nor is there evidence of a distinct drainer kit linked to this infrastructure.

Technical indicators reveal that the domain has a VirusTotal score of 1/95, indicating minimal detection by security vendors, which suggests that it may evade common security measures. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and currently resolves to IP address 188.114.97.3. The domain is still active and appears on one security blocklist, specifically blocked by PhishDestroy. The status as of now shows that it is still operational.

Current investigations indicate that the domain remains active and poses a significant risk, as it is still accessible online. The lack of a page title response could imply that the phishing site may be in the process of further developing its malicious objectives or that it is designed to respond only upon interaction. Given its blocklist presence and low detection rate, users and organizations are advised to monitor their environments closely for any potential interactions with this domain and apply necessary filtering or blocking measures to mitigate risks.