uniswapinfo[.]limited

The domain uniswapinfo.limited was observed hosting a site that claimed to be related to Uniswap but presented a page title unrelated to the brand, listing "Bitwarder | Bitwarder Giriş | Your One- Stop Design Solution | Bitwarder." The site is currently offline, but historical data shows it resolved to the IP address 188.114.96.3, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. Registration was performed through Cloudflare, Inc., and the authoritative nameservers are darwin.ns.cloudflare.com and mallory.ns.cloudflare.com, indicating the use of Cloudflare’s DNS services. Technical fingerprints reveal a stack that includes Node.js, Salesforce, Google Sign‑in, Varnish, Envoy, Amazon Web Services, Stripe, and Apple iCloud Mail, suggesting a mixed‑technology infrastructure possibly assembled to lend credibility to the fraudulent page. The SSL certificate was issued by Google Trust Services under the WE1 designation, a legitimate certificate authority, which may have been used to evade naïve user suspicion.

The domain appears on a single security blocklist and has been actively blocked by PhishDestroy. VirusTotal scans reported that two of ninety‑five security vendors flagged the domain, indicating that at least a subset of scanners identified malicious characteristics. Additionally, Gridinsoft assigned a trust score of 0 out of 100, reinforcing the assessment of high risk. The site was classified as a crypto scam targeting Uniswap users, consistent with the brand impersonation tag.

While the exact content of the page was not captured in the available intelligence, the combination of brand targeting, use of a reputable SSL certificate, and deployment of legitimate‑looking services aligns with known tactics for credential‑harvesting or fund‑diversion schemes.