unipegs[.]app

Analysis of the domain unipegs.app indicates that it is currently active and has been associated with a generic phishing campaign. The domain is listed on three public security blocklists, and browser extensions PhishDestroy, MetaMask, and SEAL have issued blocks against it, suggesting that multiple defensive products have observed malicious behavior. VirusTotal records show that the site was submitted to 91 scanning engines; none of the engines reported a detection at the time of analysis, but the absence of a detection does not imply that the site is benign, especially given its presence on blocklists.

No publicly available information on the registrar, registration date, hosting IP, SSL certificate details, HTTP response codes, or Safe Browsing status has been disclosed, limiting the depth of technical profiling. The page title and any brand references have not been published, so the exact content of the landing page remains unverified. Consequently, the primary observable indicators are the blocklist listings and the extension blocks, which together provide sufficient evidence for defenders to treat the domain as hostile.

Recommended mitigation steps include adding unipegs.app to network deny lists, configuring web proxies to block HTTP and HTTPS requests to the domain, updating endpoint protection signatures, and monitoring DNS queries for lookups to the domain. Organizations should also consider sharing any observed traffic or payloads with threat‑sharing platforms to enrich collective intelligence. Continuous monitoring is advised, as the risk level remains under investigation and the infrastructure may evolve.