yk9p[.]vip

This domain, yk9p.vip, is assessed at an elevated risk level and is specifically identified as a fake login phishing site. The threat poses a significant risk to users who may inadvertently disclose sensitive credentials and personal information, leading to potential identity theft or financial loss.

Analysis indicates that yk9p.vip was created on February 21, 2026, and is currently offline. The domain resolves to the IP address 47.77.216.153, which is located in the United States and is part of the AS45102 network operated by Alibaba (US) Technology Co., Ltd. The domain is registered through Gname.com Pte. Ltd. VirusTotal reports that 18 out of 95 security vendors flag this domain as malicious. Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy. The SSL certificate for the domain is issued to PhishDestroy and is associated with the domain botadmin.destroy.tools, further indicating its involvement in phishing operations.

To mitigate the risks associated with this fake login phishing site, users should remain vigilant and avoid clicking on any links or visiting the domain. Organizations should update their security policies to include the domain in their blocklists and educate employees about the dangers of fake login pages. Security teams are advised to monitor network traffic for any attempts to resolve the domain and to implement additional security measures such as multi-factor authentication to protect against credential theft.