claim-unitokens[.]imts[.]com[.]pk

PhishDestroy has identified claim-unitokens.imts.com.pk as a sophisticated phishing site designed to steal cryptocurrency credentials by impersonating the OKX brand. The site's title, "Uniswap Airdrop," is a common lure to trick users into connecting their wallets or entering sensitive information, leading to potential theft of funds. This threat is particularly dangerous because it combines brand impersonation with a fake airdrop campaign, exploiting the trust users have in well-known crypto platforms.

Evidence of this scam is overwhelming. The domain was created on March 25, 2026, and is flagged as phishing by Google Safe Browsing. VirusTotal reports that 16 out of 95 security vendors flag this domain as malicious, and it appears on four separate security blocklists. The site uses a Let's Encrypt SSL certificate (R13) to appear legitimate, but its IP address (184.154.115.26) is associated with known malicious activity. These technical indicators confirm that this is a high-risk threat, not a simple mistake.

If you have visited this site or entered any personal information, act immediately. Change your OKX account password and enable two-factor authentication if you haven't already. Revoke any permissions granted to suspicious dApps or wallet connections. Monitor your accounts for unauthorized transactions and consider contacting OKX support. For added safety, run a full security scan on your device. PhishDestroy continues to track such threats to protect the crypto community.