unseiswap[.]com

The domain unseiswap.com was created on February 21, 2026 and registered through Web Commerce Communications Limited. DNS resolution points to the IPv6 address 2a06:98c1:3120::3, which is announced by AS13335 Cloudflare, Inc. and geolocated to the United States. The site is protected by Cloudflare and serves a page titled "Suspected phishing site | Cloudflare" that returns an HTTP 403 status code. The presented SSL certificate is issued by Google Trust Services under the WE1 intermediate, indicating a valid TLS handshake but offering no indication of legitimate content.

Reputation metrics are uniformly negative: Gridinsoft assigns a trust score of 0 out of 100, and Google Safe Browsing flags the domain for social engineering. Ten of ninety‑three security vendors on VirusTotal have issued detections, reinforcing the malicious classification. The domain appears on two public blocklists, specifically PhishDestroy and ScamSniffer, and is listed on two additional security blocklists referenced in the intelligence. Technology profiling identifies only Cloudflare services, and the nameservers are listed as laila.ns.cloudflare.com and maciej.ns.cloudflare.com.

The threat type is recorded as a crypto scam, though the exact malicious payload or target cryptocurrency is not disclosed. Defenders should block network traffic to the IPv6 address, add the domain to URL filtering and email security policies, and monitor for any related indicators of compromise that reference the same Cloudflare infrastructure. Continuous re‑evaluation is advised, as the site status may change if the operators reactivate the domain.