# PhishDestroy domain threat record: unisat.finance Content language: English Canonical HTML report: https://phishdestroy.io/domain/unisat.finance/ Machine-readable companion: https://phishdestroy.io/domain/unisat.finance/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 01:33:47 UTC - Last availability or vendor check: 2026-10-23 02:56:36 UTC - Stored record updated: 2026-10-23 07:20:53 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.114.97.1 - Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED - Last stored HTTP status: 301 - Registration date (registry RDAP, unisat.finance): 2026-09-26 22:24:20 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a156e0-516a-7188-bcaa-fe9dfe646929/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/unisat.finance - Certificate Transparency search: https://crt.sh/?q=%25.unisat.finance - Web Archive lookup: https://web.archive.org/web/*/https://unisat.finance/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a156e0-516a-7188-bcaa-fe9dfe646929.png Captured: 2026-10-23 01:33:47 UTC - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0b7d4571-2bdb-4486-85fb-8f9a46b9391c.png Captured: 2026-10-23 02:31:07 UTC Source report: https://radar.cloudflare.com/scan/0b7d4571-2bdb-4486-85fb-8f9a46b9391c SHA-256: 5b685b6fd0c356b8389e33596a40c60d2f63ca6aac5f9ec6250f109105361924 - URLScan · 2026-10-11: https://screenshots.phishdestroy.io/us/01a129fc-047e-73fe-85d2-98cf19822261.png Captured: 2026-10-11 08:02:32 UTC Source report: https://urlscan.io/result/01a129fc-047e-73fe-85d2-98cf19822261/ SHA-256: df3ce695eeda95f111b61246eece94247a44e1cee863fd5d0198a9abfe6c9599 - URLScan · 2026-10-11: https://screenshots.phishdestroy.io/us/01a12c5d-35e9-732c-bb43-fb6c63187304.png Captured: 2026-10-11 19:07:53 UTC Source report: https://urlscan.io/result/01a12c5d-35e9-732c-bb43-fb6c63187304/ SHA-256: df3ce695eeda95f111b61246eece94247a44e1cee863fd5d0198a9abfe6c9599 - URLScan · 2026-10-15: https://screenshots.phishdestroy.io/us/01a13fb4-a153-723d-b08d-bc81d1103ba7.png Captured: 2026-10-15 13:16:11 UTC Source report: https://urlscan.io/result/01a13fb4-a153-723d-b08d-bc81d1103ba7/ SHA-256: df3ce695eeda95f111b61246eece94247a44e1cee863fd5d0198a9abfe6c9599 - URLScan · 2026-10-15: https://screenshots.phishdestroy.io/us/01a14161-8729-740a-97f4-a1740a28deaa.png Captured: 2026-10-15 21:04:39 UTC Source report: https://urlscan.io/result/01a14161-8729-740a-97f4-a1740a28deaa/ SHA-256: df3ce695eeda95f111b61246eece94247a44e1cee863fd5d0198a9abfe6c9599 - URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a15536-3378-725e-a09f-b1742b40faca.png Captured: 2026-10-19 17:29:43 UTC Source report: https://urlscan.io/result/01a15536-3378-725e-a09f-b1742b40faca/ SHA-256: df3ce695eeda95f111b61246eece94247a44e1cee863fd5d0198a9abfe6c9599 - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a1667b-3577-70db-81b6-0d6711407119.png Captured: 2026-10-23 01:58:39 UTC Source report: https://urlscan.io/result/01a1667b-3577-70db-81b6-0d6711407119/ SHA-256: df3ce695eeda95f111b61246eece94247a44e1cee863fd5d0198a9abfe6c9599 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T02:37:02Z", "uuid": "01a156e0-516a-7188-bcaa-fe9dfe646929", "scanned_at": "2026-10-20T01:15:14Z", "final_url": "https://unisat.finance/", "globals": [ "assert", "getRequiredElement", "P", "S", "getRandomNum", "getTimeStamp", "Dimensions", "Config$2", "getGlobalConfig", "setGlobalConfig", "Config$1", "Config", "setMaxGapCoefficient", "setMaxObstacleLength", "Status", "A11yStrings", "RunnerClasses", "RunnerSounds", "RunnerEvents", "updateCanvasScaling", "getA11yString", "vibrate", "createCanvas", "decodeBase64ToArrayBuffer", "createAdjustedCollisionBox", "drawCollisionBoxes", "boxCompare", "toggleHelpBox", "diagnoseErrors", "portalSignin", "updateForDnsProbe", "getMainFrameErrorCssClass", "getMainFrameErrorIconCssClass", "getSubFrameErrorIconCssClass", "shouldShowSuggestionsSummaryList", "getSuggestionsSummaryItemCssClass", "reloadButtonClick", "downloadButtonClick", "detailsButtonClick", "setAutoFetchState" ], "domain_age_days": 1036, "apex_age_days": 1036, "requests": 5, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 45, "malicious": true }, "overall": { "score": 0, "malicious": false } } }, "cf": { "v": 1, "fetched_at": "2026-10-23T02:37:04Z", "uuid": "0b7d4571-2bdb-4486-85fb-8f9a46b9391c", "scanned_at": "2026-10-23T02:31:07Z", "final_url": "https://unisat.finance/", "status": 200, "history": [ { "url": "https://unisat.finance/", "status": 200 } ], "dom_hash": "a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "unisat.finance", "type": "A", "value": "188.114.97.0" }, { "name": "unisat.finance", "type": "A", "value": "188.114.96.0" }, { "name": "unisat.finance", "type": "AAAA", "value": "2a06:98c1:3121::" }, { "name": "unisat.finance", "type": "AAAA", "value": "2a06:98c1:3120::" } ], "dnssec_valid": false, "ip": "188.114.97.0" }, "vt": { "v": 1, "fetched_at": "2026-10-23T07:20:00Z", "analysis_at": "2026-10-23T02:42:48Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 0, "suspicious": 1, "undetected": 35 }, "detections": { "Fortinet": "spam" }, "reputation": 0, "created": "2023-12-17T00:00:00Z", "updated": "2024-12-21T00:00:00Z", "first_seen": "2023-12-19T08:01:50Z", "dns": [ { "ttl": 300, "type": "A", "value": "104.21.47.237" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::ac43:ae7d" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3034::6815:2fed" }, { "ttl": 21600, "type": "NS", "value": "patryk.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "patryk.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.174.125" }, { "ttl": 21600, "type": "NS", "value": "rosalie.ns.cloudflare.com" } ], "dns_at": "2026-10-23T02:48:17Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.unisat.finance", "unisat.finance" ], "issuer": "Let's Encrypt / YE2", "serial": "6e38bf7976d776d086ea15482773d92c947", "sha256": "acfe2e06c4f0dea6d10f0c78bc2056c70a679dc2f3777587f96a00e712aa87ec", "subject": "unisat.finance", "valid_to": "2026-12-26T16:54:31Z", "valid_from": "2026-09-27T16:54:32Z" }, "whois": [], "rdap": { "status": [ "client delete prohibited", "client transfer prohibited" ], "events": { "expiration": "2027-09-26T16:00:00Z", "registration": "2026-09-26T16:00:00Z", "registrar expiration": "2027-09-26T16:00:00Z", "last update of RDAP database": "2026-09-26T16:00:00Z" }, "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "registrar_iana_id": "3765" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T02:37:23Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "unisat.finance" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-23T01:37:21Z", "first": "2026-09-27T19:51:14Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.04, "avg_page_bytes": 2841 }, "trackers": { "requests": 1 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 1, "tls": 40, "wait": 134, "connect": 11, "download": 1 }, "response_ms": 187 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "dns_server": { "ns": [ { "ip": "172.64.35.122", "host": "patryk.ns.cloudflare.com" }, { "ip": "172.64.34.57", "host": "rosalie.ns.cloudflare.com" } ], "zone": "unisat.finance" }, "location": { "ip": "2a06:98c1:3120::9", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "unisat.finance" }, "dns": { "A": [ "188.114.96.9", "188.114.97.9" ], "NS": [ "patryk.ns.cloudflare.com", "rosalie.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"patryk.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416075876, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3121::9", "2a06:98c1:3120::9" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::9", "family": 6 }, "redirects": { "chain": [ "https://unisat.finance" ] }, "tech_stack": { "technologies": [ "Cloudflare", "HTTP/3" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8" } } } } ```