wwv-app-uniewap[.]pro

PhishDestroy identifies wwv-app-uniewap.pro as an active fraudulent app portal phishing site designed to deceive users into downloading malicious applications or surrendering sensitive credentials. This domain impersonates a legitimate app distribution platform, leveraging a recently registered name and trusted SSL infrastructure to appear credible. The threat actor behind this campaign has deployed infrastructure hosted on 172.67.202.162, a cloud server commonly associated with short-lived malicious operations, and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for minimal abuse oversight. This domain, created on May 02, 2026, represents a high-risk entry point for credential theft and malware propagation. This domain presents a sophisticated phishing vector, currently undetected by 95 security vendors on VirusTotal, indicating a low detection profile at the time of analysis. The use of a Let's Encrypt SSL certificate further enhances its legitimacy, tricking users into believing the site is secure. While the exact infection vector remains under investigation, the combination of a recently registered domain, high-risk hosting, and absence of detection strongly suggests an imminent or ongoing phishing campaign targeting mobile application users. Such tactics are frequently used to harvest login credentials or deliver trojanized APK files under the guise of legitimate app updates. If you have visited wwv-app-uniewap.pro, immediately disconnect from the network, scan your device for unauthorized applications or malware, and reset passwords for any accounts accessed on this site. Do not download any files or enter credentials. Report the domain to your security team or through PhishDestroy’s abuse portal. Monitor financial and online accounts for suspicious activity, as credentials entered on this site may already be compromised. Stay vigilant: newly registered domains with low detection rates often serve as the frontline in emerging phishing campaigns.