uniswapconnect[.]pw

This domain, uniswapconnect.pw, is identified as a targeted credential phishing operation impersonating the Uniswap decentralized finance protocol. Analysis indicates the site was designed to deceive users into entering private wallet keys or recovery phrases under the pretense of connecting to legitimate Uniswap services. The fraudulent interface likely mimicked the authentic Uniswap web3 interface, potentially leading to unauthorized asset transfers from compromised wallets. Infrastructure analysis reveals multiple high-confidence threat indicators. The domain was registered on May 05, 2026, through CNOBIN INFORMATION TECHNOLOGY LIMITED, a registrar frequently associated with malicious registrations. It resolved to IP address 188.114.96.3, hosted on CloudFlare infrastructure in Canada, a common obfuscation tactic. Security vendors on VirusTotal flagged the domain at a ratio of 11/95, indicating moderate consensus on its malicious nature. Additionally, the domain appears on one security blocklist and was specifically blocked by PhishDestroy. Users who visited uniswapconnect.pw should immediately revoke any wallet permissions associated with the site. It is critical to audit all connected wallet addresses for unauthorized transactions, particularly those involving token approvals or asset transfers. If credentials were entered, affected wallets should be considered fully compromised; users must transfer remaining assets to a new, secure wallet address and cease all interactions with the compromised one. Continuous monitoring of transaction history is recommended to detect delayed malicious activity.