ui9r09xfxp2n[.]icu

The domain ui9r09xfxp2n.icu is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, ui9r09xfxp2n.icu has been taken offline, though it previously posed an elevated risk of credential theft or other fraudulent activity.

Technical indicators confirm the malicious nature of ui9r09xfxp2n.icu. The domain was flagged by 3 of 95 VirusTotal security vendors, including Fortinet, Gridinsoft, and SOCRadar. It appears on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. Registered through NiceNIC International Group Co., Limited on February 21, 2026, the domain resolved to IP address 188.114.96.3, hosted on Cloudflare's infrastructure (AS13335). The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'ANKAmall Alışveriş Merkezi'. Detected technologies included PHP, UIKit, Apache HTTP Server, Modernizr, Lightbox, jQuery, and Google Analytics.

Users who may have interacted with ui9r09xfxp2n.icu should immediately change any exposed credentials, particularly for financial or email accounts, and enable two-factor authentication where available. Monitor accounts for unauthorized activity and report any suspected fraud to relevant institutions. To aid in mitigation, victims can report the domain to their local cybersecurity authorities or platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group.