uni-claim[.]xyz

The domain uni-claim.xyz has been identified as a phishing site specifically used for a crypto drainer scam. This domain does not impersonate any known brand and is not associated with a particular drainer kit. The site is currently taken offline, but when active, it posed a significant risk to users by attempting to compromise cryptocurrency wallets and drain funds.

Technical analysis shows that uni-claim.xyz was created on February 21, 2026, and resolves to IP address 104.21.96.1, which is located in the US under AS13335 Cloudflare, Inc. The SSL certificate for the site was issued by Cloudflare TLS Issuing ECC CA 1. VirusTotal reports that 2 of 95 security vendors (Forcepoint ThreatSeeker and Gridinsoft) have flagged the domain as malicious. Additionally, uni-claim.xyz appears on two security blocklists, specifically PhishDestroy and ScamSniffer. Google Safe Browsing has not flagged the domain, and no page title was observed during analysis.

Anyone who interacted with uni-claim.xyz should immediately revoke any token approvals granted to the site and transfer their cryptocurrency assets to a new wallet to prevent further loss. It is also advisable to monitor related accounts for unauthorized transactions. Victims and security professionals can report phishing domains like uni-claim.xyz to relevant authorities and blocklists to help protect others from similar threats.