uniswap-exchange[.]limited

Analysis of uniswap-exchange.limited indicates an active high‑risk crypto‑scam infrastructure that explicitly impersonates the Uniswap brand. The domain resolves to the IP address 188.114.97.3, which is owned by AS13335 Cloudflare, Inc. and geolocated in the United States. DNS resolution is performed by the Cloudflare authoritative nameservers darwin.ns.cloudflare.com and mallory.ns.cloudflare.com, confirming that the domain was registered through Cloudflare, Inc. The web server returns an HTTP 520 status code, suggesting a Cloudflare edge‑origin communication error, but the site remains reachable and is presently blocked by the PhishDestroy blocklist. VirusTotal analysis shows that four of ninety‑five security vendors have flagged the domain, and it appears on one additional security blocklist, reinforcing the malicious assessment.

The presented SSL certificate is issued by Google Trust Services under the WE1 root, indicating a valid TLS handshake despite the underlying malicious intent. The page title returned is "Bitwarder | Bitwarder Giriş | Your One- Stop Design Solution | Bitwarder", which does not reference Uniswap and suggests possible reuse of compromised or rented infrastructure. Detected backend technologies include Apple iCloud Mail, Node.js, Express, Salesforce, Google Sign‑in, Amazon Web Services, and Stripe, all of which are typical of service‑oriented scam sites.

Gridinsoft has assigned a trust score of 0 out of 100, and the overall classification is a crypto scam targeting Uniswap users. Defenders should add the domain and its IP address to network‑level blocklists, monitor for any related C2 traffic, and enforce email and web filtering rules that reference the Uniswap brand. Continued observation is advised to detect any evolution of the payload or credential‑harvesting mechanisms that may be introduced on the site.