uniswap-lore-whb7[.]vercel[.]app

This domain operates as a high-risk Ethereum wallet drainer phishing site, specifically targeting users of decentralized finance platforms. The infrastructure impersonates the legitimate Uniswap interface, presenting a fraudulent trading portal under the title 'Uniswap | Trade' to deceive victims into connecting their cryptocurrency wallets. Analysis indicates the site employs malicious smart contract interactions to siphon funds from connected wallets without authorization, a common tactic in cryptocurrency phishing schemes. Infrastructure analysis reveals multiple concrete indicators of malicious activity. The domain was registered through Tucows Domains Inc. on February 21, 2026, an unusually future-dated creation that suggests domain spoofing techniques. Security vendor detection shows 4 out of 95 engines on VirusTotal flag the domain as malicious. The site appears on three distinct security blocklists and resolves to IP address 64.29.17.3 within Amazon.com, Inc.'s AS16509 network. Additional technical indicators include a Google Trust Services SSL certificate (WR1) and active blocking by multiple cryptocurrency security platforms. Users who have visited uniswap-lore-whb7.vercel.app should immediately revoke any wallet connections made to the site through their wallet provider's interface. All connected accounts should be considered compromised, requiring immediate transfer of assets to new, secure wallets. Browser data including cookies and site permissions should be cleared to remove any persistent tracking mechanisms. Users are advised to monitor all connected accounts for unauthorized transactions and implement additional security measures such as hardware wallet isolation for high-value assets. The domain remains active as of analysis, continuing to pose significant risk to cryptocurrency users.