creatlnlclestl355sn[.]iceiy[.]com

This domain, creatlnlclestl355sn.iceiy.com, is identified as a generic phishing infrastructure designed to mimic legitimate account suspension warnings. Analysis indicates no direct brand impersonation, but the page title 'Domain Suspended' suggests an attempt to deceive users into believing their service has been disabled, a common tactic to induce panic and prompt credential disclosure. No specific drainer kit signatures were observed in available telemetry, though the domain exhibits characteristics consistent with credential-harvesting campaigns. Infrastructure analysis reveals the domain was registered through Porkbun LLC and resolves to the IP address 185.27.134.125, hosted in the United Kingdom under I FastNet LTD. The domain was created on May 11, 2026, though this date may reflect registry manipulation or a placeholder. VirusTotal reports 10 out of 95 security vendors flagging the domain as malicious, while it appears on a single security blocklist. The SSL certificate is issued by ZeroSSL (ZeroSSL ECC Domain Secure Site CA), a common provider for both legitimate and malicious domains. No Google Safe Browsing (GSB) detections were recorded at the time of analysis. The domain is currently offline, with the registrar or hosting provider likely taking enforcement action in response to abuse reports. Despite its inactive status, residual risk remains due to potential re-registration or reuse of the infrastructure. Organizations are advised to monitor for related indicators, including the IP address 185.27.134.125 and SSL certificate thumbprints associated with ZeroSSL. Users should verify account statuses through official channels only and report suspicious suspension notices to their security teams.