y8gt[.]allocate-uniswap[.]xyz

The domain y8gt.allocate-uniswap.xyz was registered with Dynadot LLC on April 27, 2026 and resolves to the IP address 185.53.179.128, which is hosted in Germany under the TEAM‑INTERNET network. The site presents a valid HTTPS certificate issued by Let’s Encrypt, and HTTP requests return a 200 status code, indicating that the server is actively delivering content. The page title returned by the server is "allocate-uniswap.xyz," and the domain is explicitly linked to a brand‑impersonation campaign targeting Uniswap. Infrastructure analysis shows the domain uses Dynadot name servers (ns1.dyna-ns.net, ns2.dyna-ns.net) and has a Gridinsoft trust score of 0 / 100, reflecting a high likelihood of malicious intent. VirusTotal scans report that three of ninety‑one security vendors flagged the domain, and it appears on one external blocklist. The domain is currently blocked by the PhishDestroy service, but its status remains active. While the exact payload and user‑facing content have not been publicly disclosed, the combination of a brand‑impersonation label, low trust score, and vendor detections strongly suggests a phishing or credential‑harvesting operation. Defenders should immediately add 185.53.179.128 and y8gt.allocate-uniswap.xyz to network denial lists, monitor DNS queries for the associated name servers, and enforce strict email and web filtering for any references to Uniswap‑related login pages. Continuous re‑evaluation is advised, as the threat actor may modify the hosting details or deploy additional infrastructure.