dswewesd[.]onelink[.]me

The domain dswewesd.onelink.me was registered on February 21, 2026 via the OneLink (Branch) registrar and resolves to the IP address 104.20.19.108, which belongs to AS13335 Cloudflare, Inc. in the United States. An HTTP request to the site returns a 403 status code, and the SSL certificate is classified as E1. The Gridinsoft trust score for the domain is 0 out of 100, indicating a high‑risk rating. The domain appears on a single security blocklist and is actively blocked by PhishDestroy. The page title returned by the server is "CS.MONEY — Trading Bot for fast CS:GO/CS2 skins trade," while the threat intelligence tags the site as a brand‑impersonation campaign targeting the Blast brand. No additional content analysis is available beyond the title, and the site’s current activity status remains active. Defenders should treat the domain as a malicious infrastructure element, enforce blocking at DNS and proxy layers, and monitor for any related traffic to the associated IP range. Continued observation is advised to detect potential payload delivery or credential harvesting attempts that may arise from this infrastructure.