unisocks-distribution[.]xyz

This domain, unisocks-distribution.xyz, is actively engaged in brand impersonation, specifically targeting Cloudflare. The site mimics Cloudflare's branding and page layout to deceive users into believing they are interacting with a legitimate Cloudflare service. This impersonation can lead to the compromise of sensitive information, such as login credentials, financial data, and personal details, posing a significant risk to users and organizations.

Analysis indicates that the domain was registered through NiceNIC International Group Co., Limited on February 21, 2026. The domain resolves to the IP address 104.21.80.110 and employs technologies such as HSTS, Cloudflare, and HTTP/3, which may enhance its credibility and make it more difficult for users to detect as a phishing site. According to VirusTotal, 6 out of 95 security vendors flag this domain as suspicious, and it appears on 1 security blocklist. These indicators suggest that the domain is part of an ongoing and active phishing campaign.

If users have visited unisocks-distribution.xyz, they are advised to immediately change any passwords or credentials that may have been entered on the site. Additionally, users should monitor their accounts for any unauthorized activity and consider enabling multi-factor authentication (MFA) for added security. It is also recommended to report the incident to the relevant security teams and to avoid clicking on any links or downloading any files from the domain in the future.