app-unipeg[.]art

This domain is flagged as an active cryptocurrency phishing threat designed to harvest wallet credentials under the guise of a legitimate token platform. Analysis indicates that app-unipeg.art mimics the branding of a purported $UPEG cryptocurrency project, presenting a fraudulent interface to deceive users into disclosing private keys, seed phrases, or other sensitive authentication details. The domain specifically targets users involved in decentralized finance (DeFi) and token trading, exploiting the growing interest in emerging digital assets to facilitate unauthorized access to cryptocurrency wallets and funds. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on June 10, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.20.142, which is part of a content delivery network often leveraged to obscure hosting origins. The domain appears on three distinct security blocklists, and VirusTotal reports that 2 out of 95 security vendors have flagged it as malicious. The SSL certificate is issued by Google Trust Services under the WE1 intermediate, providing a false sense of legitimacy while failing to mitigate the underlying threat. Users who have visited app-unipeg.art or interacted with its content should immediately take corrective action to secure their assets. Any credentials, private keys, or seed phrases entered on the site must be considered compromised and should be revoked without delay. Affected users are advised to transfer remaining funds to a new, secure wallet using a clean device and to monitor all linked accounts for unauthorized transactions. Additionally, system scans for malware and browser extensions should be conducted to detect any residual threats. Given the domain’s continued activity and high-risk classification, vigilance and proactive security measures are strongly recommended.