unicobk[.]icu

This domain, unicobk.icu, is currently flagged as a high-risk phishing domain by security vendors and blocklists. As of July 12, 2026, the domain has been identified and flagged by 4 out of 95 security vendors on VirusTotal, indicating a moderate level of consensus among the security community regarding its malicious nature. The domain is also blocked by PhishDestroy and appears on one security blocklist, further reinforcing its classification as a threat. Infrastructure analysis reveals that unicobk.icu is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and was created on April 04, 2026. The domain utilizes Cloudflare's nameservers, specifically bart.ns.cloudflare.com and meera.ns.cloudflare.com, and resolves to the IP address 172.67.160.216, which is located in Canada and is associated with Cloudflare, Inc. Despite the domain being active, it currently returns an HTTP status code of 403, which may indicate that the site is either intentionally blocking access or is under maintenance. The SSL certificate for the domain is issued by Let's Encrypt, a common certificate authority used by both legitimate and malicious sites. Analysis indicates that the domain has been referenced in 8 threat intelligence pulses on AlienVault OTX, suggesting ongoing monitoring and reporting by the cybersecurity community. Given the high risk level and active status of unicobk.icu, defenders should take immediate action to block access to this domain and monitor for any related indicators of compromise. Additionally, users should be advised to avoid interacting with this domain and to report any suspicious activity to their security teams.