unsiki[.]one

This domain, unsiki.one, is identified as a crypto drainer phishing site designed to compromise cryptocurrency wallet credentials and execute unauthorized transactions. Analysis indicates the site is currently offline but was actively used to deceive users into connecting wallets to malicious smart contracts, resulting in fund theft. No legitimate brand impersonation was observed; the threat operates under the fabricated name 'Unsikat' as displayed in the page title. Infrastructure analysis reveals the domain was created on August 08, 2025, and registered through Gname.com Pte. Ltd. It resolves to the IP address 172.67.166.89 and is flagged by 15 of 95 security vendors on VirusTotal. The domain appears on three security blocklists and holds a trust score of 0/100. The SSL certificate is issued by Google Trust Services, a common tactic to lend superficial legitimacy to phishing infrastructure. Detection by multiple security providers, including wallet protection services, confirms its malicious intent. The domain is currently offline, but residual risk remains due to potential reactivation or migration to new infrastructure. Users who interacted with unsiki.one are advised to immediately revoke wallet permissions, transfer assets to a new wallet, and monitor transaction histories for unauthorized activity. Security teams should update blocklists to include this domain and its associated IP, while monitoring for newly registered domains using similar naming conventions or registrar patterns.