ckuygfdr[.]icu

This domain, ckuygfdr.icu, is actively engaged in brand impersonation targeting Amazon, presenting a high-risk threat to users. The site mimics legitimate Amazon product pages, specifically displaying a fraudulent listing for a Honeywell HT-900 TurboForce Air Circulator Fan under the title 'Amazon.com : Honeywell HT-900 TurboForce Air Circulator Fan, Black, Small : Beauty & Personal Care.' Such impersonation is designed to trick users into entering sensitive information or completing unauthorized transactions under false pretenses. Analysis of the domain reveals multiple concerning technical indicators. The domain resolves to the IP address 167.114.209.137 and was registered through GLOBAL ASSET DOMAINS INC on June 25, 2026. It is flagged by 10 out of 95 security vendors on VirusTotal, indicating a consensus on its malicious nature. Google Safe Browsing has classified the domain under the category 'SOCIAL_ENGINEERING,' further confirming its deceptive intent. The SSL certificate is issued by Let's Encrypt, which, while common for both legitimate and malicious sites, does not mitigate the risk posed by the domain's content and infrastructure. As of this report, ckuygfdr.icu remains active and continues to pose a significant threat to unsuspecting users. Organizations and individuals are advised to block access to this domain at the network level and update endpoint protection rules to include the domain and its associated IP address. Users who may have interacted with the site should immediately change any credentials entered and monitor financial accounts for unauthorized activity. Security teams should treat this domain as a high-priority indicator of compromise and investigate any connections to it within their environments.