uniz-coinzltd[.]com

uniz-coinzltd.com is currently listed on a security blocklist and has been identified by PhishDestroy as a phishing‑related site. The domain was registered on March 13 2025 through Dynadot Inc and remains active as of the report date. DNS resolution points to 104.21.51.36, which belongs to Cloudflare’s network; the authoritative nameservers are harlan.ns.cloudflare.com and zainab.ns.cloudflare.com. Cloudflare’s reverse‑proxy architecture obscures the true hosting environment, a pattern commonly observed in credential‑harvesting campaigns.

VirusTotal scans have returned four positive detections out of ninety‑one submitted engines, indicating that multiple anti‑malware products consider the domain malicious. No additional public intelligence such as Safe Browsing, OTX, or SSL reputation data is available in the current feed. The lack of a disclosed page title or content analysis means the exact phishing lure (e.g., credential capture, financial fraud) cannot be confirmed, though the classification as generic phishing is supported by the blocklist entry and vendor detections.

Defenders should treat the domain as hostile: it should be added to network‑level blocklists, DNS filtering solutions, and endpoint protection deny lists. Continuous monitoring of the IP address and associated Cloudflare nameservers is advised, as the infrastructure may be reused for other malicious domains. Analysts should request a full content scrape and HTML inspection to refine the threat profile and to extract any embedded URLs, scripts, or credential‑collection forms that could aid in attribution and remediation.