unitswap[.]pro

unitswap.pro entered the PhishDestroy evidence set on Feb 26, 2026. Stored content metadata identifies Ethereum as the apparent target. Content analysis also recorded brand signals for MetaMask and Uniswap. The stored content classification is crypto scam. The assembled evidence scores 100/100 (critical).

Two independent sources are positive: VirusTotal and URLScan. VirusTotal recorded 12 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Lionic, Sophos, Webroot on Aug 7, 2026 at 02:15 UTC. URLScan returned a malicious verdict with score 100. The evidence is not unanimous. AlienVault OTX listed 1 community pulse reference (not vendor detections) on Mar 1, 2026 at 05:12 UTC. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. URLQuery recorded no positive detection. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. PhishStats returned no feed match on Mar 1, 2026 at 22:02 UTC.

HTTP 301 was recorded on Aug 7, 2026 at 10:16 UTC. The recorded creation date for the domain is Feb 21, 2026. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 62.171.168.46 on AS51167 (CONTABO Contabo GmbH, DE). The associated network metadata labels the endpoint as AS51167 Contabo GmbH in Lauterbourg, FR. The stored server header is Apache/2. Captured page title: “Uniswap Interface”. DOM analysis completed on Mar 23, 2026 at 23:17 UTC; stored DOM score 78/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Aug 2, 2026 at 04:04 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists E7 as the certificate issuer with validity through Mar 5, 2026.

Taken together, the page content and independent findings support classifying this hostname as Ethereum-themed crypto scam.