Analysis of the domain itaunasijq.biz indicates that it is actively being used for a generic phishing campaign. The domain was created on July 27, 2026 and resolves to the IP address 104.21.33.196, which is hosted behind Cloudflare as reflected by its authoritative nameservers quincy.ns.cloudflare.com and sue.ns.cloudflare.com. Registration was completed through Dynadot Inc, a registrar that does not provide additional protective metadata for this domain.
The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one reputable anti‑phishing repository has flagged it as malicious. VirusTotal records show that the domain was scanned by 91 security vendors; none of the scanners reported a detection at the time of analysis, but the absence of detections does not constitute a safety guarantee. No public information regarding SSL certificate details, HTTP response codes, page title, or associated brand targets is available, leaving the exact content and lure mechanisms undisclosed.
Given the recent creation date, the active status, and the confirmed blocklist entry, defenders should treat the domain as high‑risk. Recommended mitigations include adding the domain to outbound and inbound blocking rules, monitoring DNS queries for the associated IP and any CNAME aliases, and maintaining up‑to‑date threat intel feeds that reference the domain. Continuous re‑evaluation is advised, as further analysis of the hosted page could reveal additional indicators of compromise.