uufds[.]town

This domain is flagged as a high-risk generic phishing threat. The domain uufds.town was created on February 21, 2026, and remains active as of July 12, 2026. It is registered through Dynadot LLC and resolves to IP address 23.225.199.94, located in the United States under AS40065 CNSERVERS LLC. The domain uses nameservers ns7.alidns.com and ns8.alidns.com, and its SSL certificate is issued by Let's Encrypt (R13). The page title matches the domain name, uufds.town, which is a common tactic to appear generic and avoid detection. HTTP status 200 indicates the page is live and accessible. Infrastructure analysis reveals that the domain appears on one security blocklist and is blocked by PhishDestroy. VirusTotal data shows 4 out of 95 security vendors flagging this domain, indicating a moderate level of detection across the security community. The Gridinsoft trust score is 0 out of 100, reflecting a high degree of suspicion. The combination of a recently registered domain, low trust score, and presence on a blocklist suggests this domain is actively used for phishing campaigns. It is uncertain which specific brand or service is being impersonated, as no targeted brand or phishing kit has been identified in the available intelligence. The lack of a clear brand target may indicate a generic credential harvesting page or a multi-purpose phishing infrastructure. Defenders should block access to this domain at the network level and monitor for any associated subdomains or related IP addresses. Users who may have visited the site should be warned and advised to change passwords if credentials were entered. Organizations should add this domain to their threat intelligence feeds and watch for similar patterns using the same nameservers or hosting provider. The active status and low detection rate make this a persistent risk that requires continued monitoring.