uniccrwap[.]cc

Analysis dated 25 July 2026 indicates that the domain uniccrwap.cc was registered on 18 September 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to IP address 104.21.26.114, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. An SSL certificate labeled WE1 is present, suggesting the site used HTTPS, though the certificate’s provenance has not been independently verified. Threat intelligence sources flag the domain as a generic phishing infrastructure. AlienVault OTX records associate uniccrwap.cc with fourteen separate threat pulses, and five independent blocklists (PhishDestroy, ScamSniffer, Polkadot, Enkrypt, Codeesura) have listed the domain.

The Gridinsoft trust engine assigns a score of 0 out of 100, reflecting extreme malicious confidence. VirusTotal scans show fifteen of ninety‑three security vendors flagged the domain as malicious, reinforcing the assessment. The domain’s current status is offline, which may indicate takedown or temporary suspension. However, the presence of the domain on multiple blocklists and the low trust score suggest that the infrastructure could be re‑hosted or reused in future campaigns. No public page title or content analysis is available, leaving the exact phishing lure undefined.

Defenders should continue to block traffic to 104.21.26.114 and add uniccrwap.cc to internal deny lists. Monitoring of the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED for new registrations that mimic the naming pattern is advised. Organizations relying on threat‑feed integrations should treat the fourteen OTX references and the fifteen VirusTotal detections as high‑confidence indicators of compromise. Regular re‑evaluation of the domain’s status is recommended in case the site becomes active again.