app[.]unlockcryptovest[.]com

Analysis of the domain app.unlockcryptovest.com indicates it is an active credential phishing site targeting cryptocurrency users. Registered on March 26, 2026, through Spaceship, Inc., the domain resolves to IP 64.29.17.65, hosted by Vercel, Inc. in the United States. The page title, 'VestChain | Programmable Trust for Token Economies,' suggests an attempt to impersonate a legitimate token economy platform, though the exact content and visuals of the site remain unanalyzed. Infrastructure analysis reveals the use of Cloudflare nameservers (nataly.ns.cloudflare.com, yisroel.ns.cloudflare.com) and a Let's Encrypt SSL certificate (R13). The domain is flagged by two security blocklists, including PhishDestroy and ScamSniffer, and is classified as a credential phishing threat. Technologies detected include Three.js, Vercel, Cloudflare, HSTS, and cdnjs, which are consistent with modern phishing infrastructure. The domain currently returns an HTTP 200 status, confirming its active status as of July 12, 2026. Defenders are advised to block this domain at the DNS or network level, monitor for related infrastructure, and alert users to the risk of credential theft associated with this site. The domain's low trust scores (Gridinsoft: 0/100, Scamadviser: 46/100) further support its classification as high-risk.