uniswap[.]gr[.]com

The domain uniswap.gr.com was registered on February 21 2026 through Key-Systems GmbH. DNS resolution points to IP 104.21.80.1, an address owned by AS13335 Cloudflare, Inc. and located in the United States. The hosting infrastructure is fronted by Cloudflare and supports HTTP/3, indicating use of a modern CDN service. The domain presents an SSL certificate issued by Google Trust Services under the WE1 designation, which is valid for the host name and therefore provides a veneer of legitimacy. The site title returned by the HTTP request is "VVVwin | Trang Chủ VVVwin - Link Vào Không Bị Triệu Tập", which bears no relation to the advertised brand. The page responded with HTTP 404, and the domain is currently marked as offline.

The domain appears on a single security blocklist and is explicitly listed by PhishDestroy as a fraudulent resource. VirusTotal analysis shows that 8 of 93 scanning engines flagged the domain, reinforcing the suspicion of malicious intent. The threat classification supplied identifies this as a crypto‑scam that impersonates Uniswap. No additional evidence such as login pages, malicious payloads, or redirection chains has been captured, so the exact attack vector remains unknown. However, the convergence of a recent registration, use of a reputable SSL certificate, Cloudflare front‑end, and detection by multiple security vendors strongly suggests a deliberate brand‑impersonation campaign aimed at deceiving cryptocurrency users.

Defenders should add the domain to internal blocklists, monitor DNS queries for the IP 104.21.80.1, and enforce URL filtering for any references to uniswap.gr.com. Because the domain is hosted behind Cloudflare, any takedown request must be directed to the registrar Key‑Systems GmbH or to Cloudflare’s abuse team. Continuous re‑scanning with VirusTotal and other sandbox services is recommended to capture any future payloads should the site become active again.