unircrwap[.]cc

Analysis of unircrwap.cc shows a domain created on February 21, 2026 that is currently taken offline. The domain appears on two public security blocklists and has been explicitly blocked by PhishDestroy and ScamSniffer, indicating that it was identified as a phishing vector before its removal. VirusTotal reports that 16 of 93 scanning engines flagged the domain, providing independent confirmation of malicious intent. AlienVault OTX lists the domain in thirteen threat‑intel pulses, further demonstrating that community analysts have observed it in phishing‑related activity.

Infrastructure inspection reveals that the domain resolves to IP address 188.114.97.3, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. The presence of an SSL certificate labeled "WE1" suggests the site employed HTTPS, a common tactic to increase user trust, but no additional certificate details are available. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the assessment that the domain is untrusted.

No page title or content analysis is provided, so the exact phishing lure or targeted brand remains unknown. Given the converging evidence—multiple vendor detections, blocklist listings, OTX pulses, a zero trust score, and the use of a reputable CDN for hosting—the domain should be treated as high‑risk. Defenders are advised to continue blocking the domain at perimeter and DNS layers, monitor for any re‑registration attempts, and include the associated IP address in threat‑intel feeds to catch potential reuse of the same hosting infrastructure.