unipeg[.]live

The domain unipeg.live has been confirmed as a cryptocurrency drainer phishing site designed to siphon digital assets from victims. Analysis indicates the site impersonates a legitimate cryptocurrency project, using the branding element '$UPEG' in its page title to deceive users. As of the latest assessment, the domain has been taken offline, though its infrastructure remains a potential threat for future reactivation. Infrastructure analysis reveals the domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on June 01, 2026, and resolved to the IP address 104.21.57.32. Despite no detections from 95 VirusTotal vendors, the domain appears on three security blocklists, including those maintained by MetaMask, PhishDestroy, and SEAL. Additional technical indicators include the use of Cloudflare and HTTP/3, which may obscure malicious activity or enhance site performance to evade detection. The Gridinsoft trust score for this domain is 0/100, further corroborating its malicious nature. Current status indicates the domain is offline, reducing immediate risk to users. However, given the domain's recent registration and the persistent threat posed by cryptocurrency drainers, vigilance is warranted. Organizations and individuals are advised to block the domain and its associated IP address at the network level. Users should verify cryptocurrency project authenticity through official channels and employ wallet security measures, such as hardware wallets or isolated browser sessions, to mitigate the risk of asset theft. Monitoring for domain reactivation or similar infrastructure is recommended.