unlock-strk[.]com

Analysis of unlock-strk.com shows a high‑risk, active generic phishing operation. The domain was registered on June 5, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 172.67.163.64, an address associated with a large content‑delivery network that often masks malicious infrastructure. The domain appears on three public security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, indicating that multiple protective services have identified malicious activity.

VirusTotal scans report that 12 of 91 security vendors flag the domain, reinforcing the suspicion of abuse. No additional intelligence such as SSL certificate details, HTTP response codes, or page titles is presently available, leaving the exact phishing payload and targeted brand undefined. Defenders should treat the domain as hostile: immediately deny outbound connections to the IP, add the domain to DNS sinkhole or firewall deny lists, and ensure endpoint protection signatures are updated to include the 12 vendor detections.

Continuous monitoring of the IP’s hosting provider for new malicious subdomains is advisable, as the CDN could be leveraged for rapid redeployment. Given the recent creation date and active blocklist presence, the threat is likely still in its early deployment phase, and rapid containment will reduce exposure to credential harvesting attempts.