unchainedtoken[.]live

This domain is actively engaged in brand impersonation targeting users of a major cryptocurrency exchange platform. Visitors to www.unchainedtoken.live are presented with a fraudulent interface designed to mimic legitimate security checkpoints, specifically using the page title 'Vercel Security Checkpoint.' The goal is to deceive users into entering sensitive credentials, such as login details or private keys, which are then harvested by threat actors for unauthorized access to cryptocurrency wallets or accounts. The site may also deploy crypto drainer scripts to automatically siphon funds from connected wallets, leading to immediate financial loss for victims.

Analysis indicates the domain resolves to the IP address 216.198.79.65 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. As of the latest assessment, the domain is flagged by 3 out of 95 security vendors on VirusTotal, with one additional entry on a public security blocklist. The SSL certificate is issued by Let's Encrypt, a common tactic to lend an appearance of legitimacy to phishing sites. The domain appears on a single blocklist, suggesting it is relatively new or has evaded broader detection thus far. The combination of a recently registered domain, low detection rates, and the use of a widely trusted certificate issuer highlights the domain's attempt to operate under the radar while maximizing its reach.

Users who have visited www.unchainedtoken.live or entered any information on the site should take immediate action to mitigate potential risks. First, disconnect any cryptocurrency wallets that may have been linked to the site and revoke any suspicious wallet permissions using a trusted blockchain explorer. Next, change passwords for all associated accounts, particularly those tied to cryptocurrency exchanges or wallets, and enable multi-factor authentication where available. Monitor all connected accounts and wallets for unauthorized transactions, and report any suspicious activity to the legitimate platform. Finally, consider using a hardware wallet or other secure methods for storing cryptocurrency to reduce exposure to future phishing attempts.