uneyswarp[.]cc

Analysis of the domain uneyswarp.cc as of July 12, 2026, indicates a high risk of phishing. The domain resolves to the IP address 172.67.200.54, which is located in the United States and is part of Cloudflare, Inc.'s network (AS13335). The page title for this domain is 'uneyswarp.cc | 521: Web server is down,' suggesting that the web server is not responding. This could be an attempt to mask ongoing malicious activities or indicate that the domain is part of a larger phishing campaign where the server is intentionally taken down to avoid detection. The domain is registered through NiceNIC International Group Co., Limited, a registrar that has been associated with a variety of suspicious domains in the past. The domain was created on February 21, 2026, and has been active since then, which is a relatively short period of time, often indicative of malicious intent. The domain is also listed on one security blocklist and is blocked by PhishDestroy, a reputable security service, further confirming its high risk level. While the HTTP status code 521 indicates that the web server is down, this does not necessarily mean the domain is inactive, as phishing campaigns can intermittently change the status of their web servers to evade detection. The SSL certificate is issued by Google Trust Services, which may initially seem trustworthy, but the combination of the certificate with other high-risk indicators such as the security blocklist and registrar association should raise significant concern. Network defenders should exercise caution and consider blocking access to this domain, especially in environments where user safety is paramount. Monitoring for any attempts to access this domain and related IP addresses can help in identifying and mitigating potential phishing threats. Additionally, users should be educated to recognize and report phishing attempts to prevent credential theft and other malicious activities.