uniswap[.]org-api-v4-wallet[.]com

The domain uniswap.org-api-v4-wallet.com was registered on February 21, 2026 through MAT BAO CORPORATION and currently resolves to the IP address 104.21.94.178, which is hosted by Cloudflare (AS13335) in the United States. DNS resolution is delegated to graham.ns.cloudflare.com and rosalie.ns.cloudflare.com, confirming the use of Cloudflare's infrastructure and HTTP/3 support. The site presents a TLS certificate issued by Google Trust Services under the WE1 label, indicating a valid HTTPS endpoint, yet the HTTP response returns a 403 status and the page title reads "401 Authorization Required," suggesting the front‑end may be intentionally restricting access or serving a generic error page. The domain is flagged on two independent security blocklists, PhishDestroy and ScamSniffer, and has a Gridinsoft trust score of 0 out of 100, reflecting a high confidence of malicious intent. VirusTotal analysis shows that 5 of 93 security vendors have flagged the domain, reinforcing the suspicion despite the limited detection count. The threat classification is brand impersonation targeting Uniswap and is categorized as a crypto scam, with a high risk rating and an active status. While concrete malicious payloads or credential‑harvesting pages have not been observed, the combination of recent registration, use of reputable hosting services, low trust score, and inclusion on multiple blocklists indicates a purposeful attempt to deceive users. Defenders should block the domain at network perimeter, monitor DNS queries for the associated IP and nameservers, and update endpoint protection signatures to include the observed indicators. Ongoing surveillance is recommended to detect any changes in content or additional infrastructure that could confirm active exploitation.