app[.]xn--uiswap-wwa[.]org

The domain app.xn--uiswap-wwa.org is identified as a high-risk brand impersonation threat targeting the Aave brand. Analysis indicates that this domain was likely created to deceive users into believing they are interacting with the legitimate Uniswap platform. The domain does not use an SSL certificate, which is a common indicator of malicious intent, as secure websites typically employ SSL to encrypt data and verify their identity.

Infrastructure analysis reveals that app.xn--uiswap-wwa.org was created on February 21, 2026, and is registered through OVH, SAS. The domain resolves to the IP address 162.159.142.117. Google Safe Browsing has flagged this domain as a phishing threat, and it appears on 3 security blocklists. VirusTotal reports that 16 out of 95 security vendors flag this domain as malicious. The page title 'Uniswap | Trade Crypto on DeFi's Leading Exchange' further supports the impersonation of the Uniswap brand.

The domain is currently offline, which suggests that it has been taken down by the registrar or hosting provider in response to the reported threat. However, the infrastructure and technical indicators suggest that the domain posed a significant risk to users of Aave and Uniswap. Despite the domain being offline, users should remain vigilant for any attempts to revive the domain or similar malicious activities. Security teams are advised to monitor for any resurrection of the domain and to update their blocklists accordingly.