un-wallet-v3[.]app

The domain un-wallet-v3.app was registered on February 21, 2026 and is currently offline. Analysis shows it hosted an SSL certificate identified as WE1 and resolved to the Cloudflare IP address 172.67.149.244, which is associated with AS13335 in the United States. The site’s page title – “Uniswap | Trade Crypto on DeFi’s Leading Exchange” – does not match the advertised brand, yet the domain is explicitly catalogued as impersonating Aave and classified as a wallet/seed phishing operation. Detection metrics indicate that 11 of 93 security vendors on VirusTotal flagged the domain, and it appears on a single external security blocklist.

The Gridinsoft trust score is 0 out of 100, reflecting a high likelihood of malicious intent. PhishDestroy has also blocked the domain, confirming its inclusion in anti‑phishing feeds. While the site is no longer reachable, the combination of low trust scoring, vendor detections, and explicit impersonation of Aave suggests a credential‑stealing campaign targeting cryptocurrency wallets. Defenders should continue to block the resolved IP address and add un-wallet-v3.app to local DNS deny lists.

Monitoring for re‑registration or similar domain patterns is advised, as threat actors often recycle infrastructure. Organizations using Aave services should alert users to the risk of unsolicited seed‑phrase requests and enforce verification of URLs before any wallet interaction. Incident response teams should treat any traffic to this domain as malicious and quarantine related logs for further forensic review.