allocate-unisocks[.]xyz

Analysis of allocate-unisocks.xyz shows a domain that was created on February 21, 2026 and is presently taken offline. The domain resolves to IP address 188.114.96.3, which belongs to AS13335 operated by Cloudflare, Inc., placing the hosting infrastructure in the United States. Registration was performed through NiceNIC International Group Co., Limited, indicating a commercial registrar. The site presented the page title "Suspected phishing site | Cloudflare" and employed standard Cloudflare security features, including HTTP Strict Transport Security (HSTS) and HTTP/3 support.

The TLS certificate is issued by Google Trust Services under the identifier WE1, confirming the use of a legitimate certificate authority. Nameservers are malcolm.ns.cloudflare.com and sydney.ns.cloudflare.com, both Cloudflare‑managed. The domain appears on three external blocklists and is listed as blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans report that three out of ninety‑five security vendors flagged the domain, reinforcing the malicious assessment.

While the exact phishing vector or targeted brand is not disclosed in the available data, the combination of blocklist inclusion, vendor detections, and the explicit page title strongly indicates a phishing operation. Defenders should block allocate-unisocks.xyz at network perimeters, update URL filtering rules, and monitor for any future re‑hosting attempts. Incident response teams should also consider adding the IP 188.114.96.3 to watchlists, as Cloudflare‑hosted malicious domains often leverage shared infrastructure. Continuous monitoring of the registrar NiceNIC and the associated nameservers is advised to detect potential re‑registration of the domain or similar patterns.