adresler-2026[.]icu

The domain adresler-2026.icu is currently active and is associated with a high-risk credential theft campaign. The domain impersonates a legitimate service to trick users into providing sensitive information, including login credentials and personal data.

Analysis indicates that this domain is flagged by 3 of 95 security vendors on VirusTotal, suggesting a consensus among the broader security community regarding its malicious nature. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for being associated with a variety of suspicious domains. The domain resolves to the IP address 188.114.97.3, which is located in California and is hosted by CloudFlare, Inc. The domain was created on May 01, 2026, and appears on 1 security blocklist, specifically PhishDestroy. The SSL certificate is issued by Let's Encrypt, which is a common choice for phishing sites as it provides a quick and easy way to establish HTTPS connections, thereby potentially misleading users into believing the site is secure.

Given the current active status of the domain and the evidence of credential theft, it is strongly recommended that all users avoid interacting with adresler-2026.icu. Network administrators should consider adding this domain to their blocklists to prevent access from within their networks. Additionally, users should be educated on the signs of phishing attempts and the importance of verifying the authenticity of websites before entering any personal information.