id0976443[.]icu

The domain id0976443.icu is actively involved in a generic phishing campaign, specifically targeting users with a fake login page impersonating YouTube. This domain is designed to deceive users into providing sensitive information, such as login credentials and personal data, under the guise of a common and trusted brand.

Infrastructure analysis reveals that id0976443.icu has a VirusTotal detection score of 17/95, indicating a significant level of suspicion among security vendors. The domain is registered through Global Domain Group LLC and resolves to the IP address 188.114.97.3, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The domain was created on December 17, 2025, and appears on 1 security blocklist. The page title 'Yоutubе | Copyright strikes' further suggests an attempt to mimic the legitimate YouTube brand and trick users into believing they are accessing an official site.

The domain is currently active and remains a high-risk threat. Response actions should include updating security blocklists to include this domain and educating users about the risks of phishing sites impersonating well-known brands. Despite the existing blocklist and VirusTotal detections, the domain's active status and lack of SSL certificate pose ongoing risks to potential victims. Immediate action is recommended to mitigate these risks.