uni929828[.]icu

uni929828.icu was registered through PublicDomainRegistry.com, operated by PDR Ltd., on 11 June 2026. The domain is listed as active and assigned a high‑risk rating for generic phishing. VirusTotal analysis reports that six of ninety‑one antivirus engines flagged the domain, providing independent confirmation of malicious activity. The domain appears on three public security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, indicating that multiple defensive products have already incorporated it into their deny lists.

Google Safe Browsing classifies the site as a social‑engineering threat, which aligns with the phishing designation. No public information on the underlying web server, IP address, autonomous system number, SSL certificate, or page title has been released, so the exact content and targeted brand remain unknown. The recent creation date, combined with multi‑vendor detections and blocklist presence, suggests an opportunistic infrastructure that is likely being used to host credential‑stealing pages or redirect victims to malicious payloads. Defenders should immediately add uni929828.icu to URL filtering and DNS sinkhole rules, monitor for any DNS resolution attempts, and treat any outbound connections as hostile.

Email gateways should block messages that reference this domain, and security awareness training should remind users to avoid unknown .icu links, especially those flagged by Google Safe Browsing. Sharing the indicator with threat‑intel platforms and updating SIEM correlation rules will improve detection of related activity. Continuous monitoring is recommended, as further analysis may reveal additional infrastructure components or the specific brand being impersonated.