unchainedtoken.live
“PEPU — New Era Claim”
www.unchainedtoken.live impersonates OKX via brand impersonation phishing. Detected by 3/95 vendors on VirusTotal, registered via NICENIC INTERNATIONAL GROUP CO
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Résumé des preuves
This domain is actively engaged in brand impersonation targeting users of a major cryptocurrency exchange platform. Visitors to www.unchainedtoken.live are presented with a fraudulent interface designed to mimic legitimate security checkpoints, specifically using the page title 'Vercel Security Checkpoint.' The goal is to deceive users into entering sensitive credentials, such as login details or private keys, which are then harvested by threat actors for unauthorized access to cryptocurrency wallets or accounts. The site may also deploy crypto drainer scripts to automatically siphon funds from connected wallets, leading to immediate financial loss for victims.
Analysis indicates the domain resolves to the IP address 216.198.79.65 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. As of the latest assessment, the domain is flagged by 3 out of 95 security vendors on VirusTotal, with one additional entry on a public security blocklist. The SSL certificate is issued by Let's Encrypt, a common tactic to lend an appearance of legitimacy to phishing sites. The domain appears on a single blocklist, suggesting it is relatively new or has evaded broader detection thus far. The combination of a recently registered domain, low detection rates, and the use of a widely trusted certificate issuer highlights the domain's attempt to operate under the radar while maximizing its reach.
Users who have visited www.unchainedtoken.live or entered any information on the site should take immediate action to mitigate potential risks. First, disconnect any cryptocurrency wallets that may have been linked to the site and revoke any suspicious wallet permissions using a trusted blockchain explorer. Next, change passwords for all associated accounts, particularly those tied to cryptocurrency exchanges or wallets, and enable multi-factor authentication where available. Monitor all connected accounts and wallets for unauthorized transactions, and report any suspicious activity to the legitimate platform. Finally, consider using a hardware wallet or other secure methods for storing cryptocurrency to reduce exposure to future phishing attempts.
Renseignements sur la sécurité réseau Registrar context
Forensic History & Detection Timeline
-
Domain Status Transition Aug 2, 2026 · 00:14 UTCDomain state transitioned from dead to alive.
-
Domain Status Transition Aug 1, 2026 · 13:04 UTCDomain state transitioned from alive to dead.
-
VirusTotal Detections Update Jun 25, 2026 · 19:10 UTCVirusTotal scanner detections updated from 0 to 3. Added scanner alerts: Gridinsoft, SOCRadar, alphaMountain.ai.
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Evasion evidence
Cloaking confirmed: scanners and victims see different content
The page served one response to a browser-like visitor and another to a crawler or security scanner. Cloaking exists only to keep reviewers away from the real landing page.
- Stored cloaking flag
- Observed
- Type de dissimulation
status_split- Score de dissimulation
- 1/6
- Last cloaking scan
- Server header seen by scanner
Vercel
Scanner note: dead_http: raw=http_451; http=451; via=https_proxy; server=Vercel; provider_error=DEPLOYMENT_DISABLED
Provider response during scan: DEPLOYMENT_DISABLED
Capture enregistrée · 3 sources
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-09-20 02:32:40 UTC
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of unchainedtoken.live · checked Jun 25, 2026
Données factuelles et rapports externes
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif