uniswapfoundation[.]limited
“Bitwarder | Bitwarder Giriş | Your One- Stop Design Solution | Bitwarder”
This domain, uniswapfoundation.limited, poses a direct threat as a brand-impersonation scam targeting cryptocurrency users of the Uniswap platform. Analysis of the page title, Bitwarder | Bitwarder Giriş | Your One-Stop Design Solution | Bitwarder, reveals an attempt to masquerade as a legitimate service while likely harvesting login credentials or wallet recovery phrases under false pretenses. The domain’s infrastructure and content are designed to exploit trust in the Uniswap brand, potentially leading to financial theft or unauthorized access to digital assets.
Evidence supporting this assessment includes multiple technical indicators. The domain is flagged by 6 out of 95 security vendors on VirusTotal, indicating broad recognition of its malicious nature. It appears on one security blocklist and is currently offline, though prior activity suggests it was actively used in phishing campaigns. Registered through Cloudflare, Inc., the domain resolves to the IP address 104.21.28.93 and employs an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy. Detected technologies include Node.js, Express, and Cloudflare Browser Insights, further confirming its operational intent as a web-based attack vector.
Users who visited uniswapfoundation.limited should take immediate action to mitigate potential risks. Disconnect any wallets or accounts linked to the site and revoke permissions for associated decentralized applications. Monitor financial transactions for unauthorized activity and consider replacing compromised credentials, particularly if sensitive information such as seed phrases or private keys was entered. Report the domain to relevant security teams and blocklist providers to prevent further exploitation. Given the elevated risk level, affected individuals should assume their data may have been exposed and act accordingly.
Network Security Intelligence
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 5 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal Analysis
Archived Evidence
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of uniswapfoundation.limited · checked Jun 27, 2026
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive