unidkjuy[.]com

Analysis of www.unidkjuy.com indicates that the domain is actively used for generic phishing. The domain was registered on June 06, 2026 through Amazon Registrar, Inc. and is served by Cloudflare nameservers anuj.ns.cloudflare.com and zita.ns.cloudflare.com. DNS resolution points to IP address 172.67.164.70, which is associated with Cloudflare’s network. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service. VirusTotal has recorded six positive detections out of ninety‑one scanning engines, confirming that multiple independent scanners have identified malicious behavior.

The threat is classified as high risk and the domain remains active as of the report date, July 23, 2026. Evidence gaps include the absence of publicly disclosed Safe Browsing status, Open Threat Exchange (OTX) indicators, SSL certificate details, HTTP response codes, page title, and any observed brand or kit signatures. Consequently, the precise lure used in the phishing campaign cannot be determined from the current data set. Defenders should prioritize immediate containment actions.

The domain should be added to inbound and outbound firewall deny lists, DNS filtering rules, and proxy block policies. Monitoring of traffic to the associated Cloudflare IP (172.67.164.70) is advised, as the IP may host additional malicious domains. Security teams should also update intrusion detection signatures to flag the six VirusTotal‑identified vendor detections. Continuous re‑evaluation is recommended to capture any future changes in blocklist status, additional vendor detections, or observable content that could refine the mitigation strategy.