costouni[.]com

The domain costouni.com has been identified as a phishing site designed to deceive users into believing they are eligible for a $750 gift card reward. Analysis confirms this as a generic phishing threat, with no affiliation to any legitimate retail or reward program. The domain is currently offline, though prior activity indicates an elevated risk of financial or credential theft for unsuspecting visitors. Infrastructure analysis reveals the domain was registered on February 17, 2026, through TuringSign Inc. d/b/a Cosmotown, a registrar frequently associated with high-risk domains. It resolves to the IP address 185.66.140.182 and employs a Let's Encrypt SSL certificate to create a false sense of legitimacy. Detection metrics show the domain is flagged by 13 of 95 security vendors on VirusTotal, with one active security blocklist entry. Technologies detected include LiteSpeed web server, Statcounter analytics, and HTTP/3 protocol support, which may be leveraged to evade basic detection mechanisms. At present, costouni.com has been taken offline, though similar domains may reemerge under altered infrastructure. Users are advised to treat any communication referencing this domain or its associated reward offer as fraudulent. Organizations should update blocklists to include the domain and its resolving IP address, while individuals should verify reward claims through official channels only. Monitoring for newly registered domains under the same registrar may help preempt future iterations of this campaign.