sahabetek2026[.]icu

This domain, sahabetek2026.icu, is identified as a generic phishing threat. It is suspected of impersonating a legitimate brand, although the specific brand has not been confirmed. No drainer kit has been identified in the available intelligence.

Infrastructure analysis reveals that sahabetek2026.icu is flagged by 3 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. The domain is registered through FewMoreTaps OÜ and resolves to the IP address 188.114.97.3. It was created on April 28, 2026, and currently has a Gridinsoft trust score of 0/100, which suggests a high level of associated risk. The domain appears on 1 security blocklist and is mentioned in 8 threat intelligence pulses on AlienVault OTX.

The domain is currently offline, which may indicate a temporary takedown or a response to security actions. Despite its offline status, the risk remains elevated due to its history of phishing activities and the low trust score. It is recommended that security teams monitor the domain for any reactivation and ensure that network defenses are updated to block any future malicious activities. Users should be cautious and avoid clicking on any links or entering personal information on any pages related to sahabetek2026.icu.