youniacleaners[.]co[.]ke

This domain, youniacleaners.co.ke, is actively flagged as a high-risk brand impersonation threat targeting the Across brand. Registered on December 13, 2023, through HostPinnacle Cloud Limited, the domain resolves to the IP address 84.16.249.171 and is currently operational as of July 12, 2026. Analysis of its infrastructure reveals the use of WordPress, Proton Mail, MySQL, PHP, LiteSpeed, and reCAPTCHA, alongside HTTP/3 support. The page title, 'Younia Cleaning Services – For Alluring Finish,' does not directly reference the impersonated brand, though the domain’s classification as a brand impersonation threat is confirmed by multiple intelligence sources. The domain appears on three security blocklists, including PhishDestroy, PhishingDB, and BLP-Malware, and is referenced in 50 threat intelligence pulses on AlienVault OTX. Detection engines on VirusTotal flag the domain as malicious, with 16 out of 95 security vendors marking it as suspicious. The SSL certificate is issued by Let’s Encrypt, a common practice among both legitimate and malicious domains, which does not mitigate the risk in this case. The domain’s trust score from Gridinsoft is 0 out of 100, further corroborating its classification as a high-risk entity. While the exact content and tactics employed by the domain remain unanalyzed, the combination of brand impersonation, active status, and detection across multiple security platforms indicates a deliberate attempt to deceive users. Defenders should treat this domain as a confirmed threat and implement blocking measures at the network and endpoint levels. Monitoring for related infrastructure, such as associated IP ranges or additional domains registered through the same registrar, is recommended to identify potential secondary threats. The domain’s continued activity suggests ongoing malicious intent, and organizations should prioritize its inclusion in threat intelligence feeds and automated blocking systems.