unigamerclub[.]com

Analysis of the domain unigamerclub.com indicates a confirmed crypto scam operation targeting users of the Across protocol. The domain was registered on August 26, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the domain resolves to IP address 94.181.229.250, hosted within the Russian autonomous system AS41727 (JSC ER-Telecom Holding). Nameserver configuration points to dns1.regway.com, dns2.regway.com, dns3.regway.com, and dns4.regway.com, a pattern consistent with bulletproof hosting providers observed in prior phishing campaigns. The domain currently returns an HTTP 200 status, confirming active hosting. A Let's Encrypt SSL certificate (R12) is present, providing HTTPS encryption and lending a superficial appearance of legitimacy. The page title is reported as 'Home,' though the exact content and functionality remain unanalyzed. The domain is explicitly classified as a crypto scam in available threat intelligence, aligning with the impersonation of the Across protocol, a known target for fraudulent token or wallet-draining schemes. Gridinsoft assigns the domain a trust score of 0/100, and it appears on at least one security blocklist, specifically PhishDestroy. While VirusTotal data indicates a single detection out of 95 vendors, this limited visibility does not preclude the domain's malicious nature, as detection coverage varies across security products. Defenders are advised to treat unigamerclub.com as a confirmed malicious asset. Network-level blocking of the IP 94.181.229.250 and associated nameservers is recommended, alongside monitoring for related domains registered through the same registrar or hosted within AS41727. Further investigation into the site's backend infrastructure may reveal additional linked campaigns or wallet addresses used for fraudulent transactions.