uni-wallet[.]com

PhishDestroy identifies uni-wallet.com as an active crypto drainer posing as a cryptocurrency wallet service, enabling unauthorized fund transfers from victims' wallets. The domain leverages deceptive branding to trick users into connecting their wallets and approving malicious transactions. This threat is particularly insidious due to its targeted attack vector against crypto holders, where a single transaction can result in irreversible financial loss. The domain's rapid deployment and minimal detection suggest a sophisticated and evolving threat landscape, warranting immediate user awareness and caution.

This domain was flagged after emerging on April 02, 2026, with a VirusTotal detection rate of 3 out of 95 security engines, indicating it currently evades mainstream antivirus and anti-phishing tools. It resolves to IP address 162.159.142.117 and is hosted by IONOS SE, utilizing a Google Trust Services SSL certificate to enhance its appearance of legitimacy. uni-wallet.com has already been blocked by MetaMask and SEAL security solutions and is listed on 2 active security blocklists, underscoring its malicious nature despite the absence of conventional detection signatures.

Users should avoid interacting with uni-wallet.com entirely and verify any wallet-related websites through official channels before entering credentials or connecting digital assets. If accidental interaction occurs, revoke any wallet connection permissions immediately using tools like revoke.cash or the wallet's built-in dApp permissions manager. Crypto users are advised to use hardware wallets for high-value assets and enable multi-factor authentication where possible. Always cross-check domain names for subtle misspellings or unusual TLDs, as threat actors frequently exploit visual similarity to legitimate services. Report this domain to your antivirus provider or security platform to help improve collective defense against emerging crypto threats.