upegv4[.]app

This domain, upegv4.app, poses a significant threat as a crypto drainer. It is designed to trick users into revealing their cryptocurrency wallet credentials or private keys, leading to the potential loss of funds. The site impersonates a legitimate platform called Unipeg, which could confuse users and lower their guard.

Analysis indicates that upegv4.app is flagged by 3 out of 95 security vendors on VirusTotal, suggesting that it has been identified as malicious by some but not all security systems. The domain was created on May 27, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The site uses modern technologies such as Vue.js, HSTS, and Cloudflare services, which can make it appear more legitimate and harder to detect. Additionally, it is blocked by MetaMask, PhishDestroy, and SEAL, indicating that these security tools recognize the threat.

If a user has visited upegv4.app, they should immediately check their cryptocurrency wallets for any unauthorized transactions. It is recommended to change all related passwords and enable two-factor authentication (2FA) if not already in place. Users should also monitor their accounts for any unusual activity and report any incidents to their wallet provider or relevant security authorities. To prevent future exposure, users should verify the URL of any site they visit, especially those involving sensitive financial information, and use reputable security tools and browser extensions.