verify-uniswap[.]com

The domain verify-uniswap.com is identified as a high-risk brand impersonation threat currently offline. Analysis confirms it targets Arbitrum, a prominent decentralized finance (DeFi) platform, by mimicking the Uniswap interface to deceive users into disclosing sensitive information or transferring cryptocurrency assets. Infrastructure analysis reveals the domain was registered on January 30, 2026, through Eranet International Limited. It resolves to the IP address 172.67.152.127 and lacks an SSL certificate, a critical security red flag. The domain is flagged by 19 of 95 security vendors on VirusTotal and appears on three distinct security blocklists. AlienVault OTX records it in one threat intelligence pulse, further corroborating its malicious classification. The page title, 'Uniswap | Trade Crypto on DeFi’s Leading Exchange,' directly aligns with known Uniswap branding, reinforcing its impersonation tactics. As of the latest assessment, verify-uniswap.com has been taken offline, reducing immediate exposure. However, users who interacted with the domain should assume credential compromise and revoke any active sessions or authorizations tied to DeFi platforms. Organizations are advised to block the domain and its associated IP (172.67.152.127) at the network level. Monitor for residual phishing attempts using similar naming conventions, such as typosquatting or subdomain abuse. Security teams should prioritize reviewing logs for connections to the domain or IP during its active period and alert affected users to conduct account audits.