chili9-th[.]com

The domain chili9-th.com is assessed to be at a high risk level for credential theft. Analysis indicates that the website was likely used to trick users into revealing sensitive information such as login credentials and personal data.

Infrastructure analysis reveals that chili9-th.com resolves to the IP address 27.254.41.232, which is located in Thailand and operated by AS9891 CS LOXINFO Public Company Limited. The domain was created on June 01, 2025, and is registered through Web Commerce Communications Limited. It appears on three security blocklists, further indicating its malicious nature. VirusTotal has flagged the domain with 16 out of 95 security vendors, suggesting a significant level of suspicion among security professionals. The SSL certificate is issued by Let's Encrypt, which is a common practice among phishing sites to appear more legitimate.

To mitigate the risks associated with credential theft, users are advised to avoid visiting or interacting with chili9-th.com. It is recommended to use multi-factor authentication (MFA) for all important accounts and to monitor account activity for any unauthorized access. Additionally, users should be cautious of suspicious emails or messages that may contain links to this domain and report any such instances to their respective security teams. Regularly updating passwords and using a reputable password manager can also help prevent credential theft.