unisocksbridge[.]xyz

Analysis of unisocksbridge.xyz shows a recently registered domain (creation date February 21 2026) that is currently offline and serving a 522: Connection timed out page title. The domain resolves to IP 104.21.79.90, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. An SSL certificate identified as WE1 is present, indicating a weak or potentially mis‑issued certificate. Reputation data is uniformly negative: Gridinsoft assigns a trust score of 0 out of 100, the domain appears on one security blocklist, and it is explicitly blocked by PhishDestroy.

VirusTotal reports that 7 of 93 scanning engines flag the domain, reinforcing the malicious assessment. The listed scam type is a crypto scam, aligning with the broader threat classification of generic phishing. Concrete evidence therefore includes the low trust score, blocklist presence, multi‑engine detection, Cloudflare hosting, and the weak SSL certificate.

Uncertainties remain regarding the exact payload or phishing landing page, as the site is offline and no page content beyond the timeout title is available. Defenders should immediately add unisocksbridge.xyz and its resolving IP 104.21.79.90 to URL filtering and firewall deny lists, monitor for any future DNS re‑activation, and consider broader Cloudflare‑based threat‑intel feeds for similar patterns. Continuous telemetry collection from DNS queries and proxy logs is advised to detect potential resurgence, and security teams should update endpoint and gateway detection signatures to include the domain’s known indicators of compromise.