unichainsactivity[.]live

The domain unichainsactivity.live was registered on January 15, 2026 through DevExpanse Ltd d/b/a Regery.com and is currently resolved to the IPv4 address 69.10.36.42, which belongs to AS19318 Interserver, Inc in the United States. The HTTPS endpoint is secured by a ZeroSSL ECC Domain Secure Site CA certificate, indicating that TLS is correctly configured but does not guarantee legitimacy. HTTP requests receive a 200 OK status, and the page title returned by the server is “Blockchain Activity Web,” consistent with the reported crypto‑scam classification. Technical fingerprinting shows the use of LiteSpeed web server, external libraries from jsDelivr and Google Hosted Libraries, Google Font API, and HTTP/3 support.

The domain appears on four known phishing blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, and is listed in one AlienVault OTX pulse. VirusTotal analysis shows that 15 out of 95 scanned security vendors flagged the domain as malicious, reinforcing the suspicion. Independent reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, effectively marking the site as untrusted. The nameservers vda3800a.trouble-free.net and vda3800b.trouble-free.net are publicly visible and do not provide additional reputation signals.

While the available data confirms that the domain is actively serving content and is associated with a crypto‑related scam, no public samples of the page’s HTML or payload have been disclosed, leaving the exact phishing mechanics uncertain. Defenders should block any outbound connections to 69.10.36.42, add the domain and its nameservers to local deny lists, and monitor for any use of the observed TLS certificate in other contexts. Email gateways and web filters should be configured to treat the domain as malicious, and incident response teams should advise users that any requests to “Blockchain Activity Web” are likely fraudulent and should be avoided.