unserizo[.]co[.]com

unserizo.co.com was registered on 21 February 2026 through Moniker Online Services LLC. The domain resolves to the IPv4 address 212.111.89.116, which is announced by ASN 216071 (SERVERS TECH FZCO) and geolocated to the Netherlands. No TLS certificate is presented for the site, indicating that traffic is served over plain HTTP. The authoritative nameservers listed are ns1.nic.co.com, ns2.nic.co.com, ns3.nic.co.com, and ns4.nic.co.com. The only publicly visible page title is “Unserizo – Secure Hardware Wallet,” suggesting a cryptocurrency‑related lure.

VirusTotal scans show that two of ninety‑five security vendors flagged the domain, and it appears on a single external blocklist. PhishDestroy has also taken the domain offline and listed it as a crypto‑scam. The current HTTP status is offline, preventing further interaction, but the infrastructure components remain observable. Analysis indicates that the domain is being used for a generic phishing campaign targeting cryptocurrency users, likely by masquerading as a hardware‑wallet provider.

The modest detection rate (2/95) and limited blocklist presence suggest early‑stage deployment or low‑visibility distribution. Defenders should block traffic to 212.111.89.116 at the network perimeter, add the domain and its four NIC nameservers to URL filtering policies, and monitor other domains registered by Moniker Online Services LLC for similar creation dates or naming patterns. Continuous re‑scanning on VirusTotal or similar multi‑engine platforms is recommended to capture any escalation in detection counts. Organizations should also advise users to verify TLS certificates and to avoid entering wallet credentials on non‑HTTPS sites, especially those referencing “Unserizo” or hardware‑wallet terminology.