unicrypto[.]uniaffcrm[.]com

Analysis of the domain unicrypto.uniaffcrm.com shows that it is currently taken offline, returning an HTTP 404 status code. The site resolves to the IP address 89.208.11.180, which is allocated to AS12695 LLC Digital Network in Russia. The hosting provider is identified as Cloudflare, as indicated by the authoritative nameservers hayes.ns.cloudflare.com and heidi.ns.cloudflare.com. Registration data reveals the domain was created on March 04, 2024 through GoDaddy.com, LLC, and the web server software is identified as Nginx.

The TLS certificate in use is issued by Let’s Encrypt (certificate identifier E8), confirming that encrypted connections were supported when the site was active. The page title reported by the scanner is "UniCrypto," suggesting the site may have been positioned to mimic a legitimate UniCrypto service, although no additional branding or content details are available. Threat intelligence sources have placed the domain on a single blocklist, specifically PhishDestroy, indicating that at least one security vendor has deemed the domain malicious. VirusTotal scans show that one out of ninety‑five security vendors flagged the domain, providing a minimal but corroborating indicator of risk.

No further public reputation scores or Safe Browsing entries are present in the available data. Because the site is offline and returns only a 404 page, the exact malicious payload or credential‑harvesting mechanism cannot be confirmed. Defenders should continue to block network traffic to the IP 89.208.11.180 and add the domain to local deny lists. Monitoring for any re‑activation of the domain or the emergence of related sub‑domains is recommended, as well as periodic re‑scanning to capture potential changes in content or detection status.