# PhishDestroy domain threat record: uniswapnews.wiki Content language: English Canonical HTML report: https://phishdestroy.io/domain/uniswapnews.wiki/ Machine-readable companion: https://phishdestroy.io/domain/uniswapnews.wiki/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 01:59:38 UTC - Last availability or vendor check: 2026-10-25 01:59:38 UTC - Stored record updated: 2026-10-25 05:39:20 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: Uniswap ## Stored infrastructure - Observed IP address: 5.104.72.82 - Registrar in stored WHOIS data: Gname.com Pte. Ltd. - Registrar country in stored WHOIS data: PL - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-10-22 11:28:03 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a170c7-601f-71bf-ac2f-09b3a856145b/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/uniswapnews.wiki - Certificate Transparency search: https://crt.sh/?q=%25.uniswapnews.wiki - Web Archive lookup: https://web.archive.org/web/*/https://uniswapnews.wiki/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added uniswapnews.wiki to its internal blocklist on 2026-10-25 following an admin report. The site returned HTTP 200 and the recorded page title was “Orynex Talvo – Home”. How the scam works No specific malicious behavior was observed on the page, but newly‑registered domains with generic cryptocurrency‑related titles are often used in phishing or fake‑exchange schemes that try to collect wallet addresses or credentials. The listing is therefore based on the domain’s characteristics rather than confirmed abuse. Evidence VirusTotal reported one suspicious detection out of 92 scanners (alphaMountain.ai) on 2026-10-24. Google Safe Browsing showed no threat, while URLScan’s overall verdict was clean but its engine flagged the page as malicious with a high confidence score on 2026-10-25. External blocklists MetaMask and SEAL listed the domain, PhishDestroy’s own list marks it as suspicious, and OTX references it in four pulses. Infrastructure The domain was registered with Gname.com Pte. Ltd. on 2026-10-22 and resolves to IP 5.104.72.82, hosted by MHost LLC in the Netherlands. TLS is provided by Let’s Encrypt, issued on 2026-10-22 and valid until 2027-01-20. The server reported open ports 22, 80 and 443. What to do Visitors should avoid entering any credentials, wallet addresses, or approving transactions on this site. Organizations should block the domain, monitor outbound traffic to its IP, and use the recorded certificate, IP and registrar details for any further investigation. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a170c7-601f-71bf-ac2f-09b3a856145b/ Cloudflare Radar report: https://radar.cloudflare.com/scan/10d96311-39d0-404b-8339-695bee2b439e URLQuery report: https://urlquery.net/report/da103976-5a16-4ee0-a1ea-3bf3969a42d4 Stored capture screenshot: https://i.ibb.co/xKR4Dg8F/5a3849c4f3f3.png Cloudflare Radar screenshot (2026-10-25T02:34:39Z): https://screenshots.phishdestroy.io/cf/10d96311-39d0-404b-8339-695bee2b439e.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/da103976-5a16-4ee0-a1ea-3bf3969a42d4.png URLScan screenshot (2026-10-23T03:58:51Z): https://screenshots.phishdestroy.io/us/01a166e9-4372-77aa-a1a9-e161b6cf5c25.png URLScan capture report: https://urlscan.io/result/01a166e9-4372-77aa-a1a9-e161b6cf5c25/ URLScan screenshot (2026-10-25T02:02:19Z): https://screenshots.phishdestroy.io/us/01a170cb-4b78-732b-9d21-87b61891c003.png URLScan capture report: https://urlscan.io/result/01a170cb-4b78-732b-9d21-87b61891c003/ VirusTotal report: https://www.virustotal.com/gui/domain/uniswapnews.wiki Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=uniswapnews.wiki Archived copy: https://web.archive.org/web/20261025015704/https://uniswapnews.wiki/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 05:05:05 UTC ## Stored page captures - Primary capture: https://i.ibb.co/xKR4Dg8F/5a3849c4f3f3.png Captured: 2026-10-25 01:59:38 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a170c7-601f-71bf-ac2f-09b3a856145b.png Captured: 2026-10-25 01:59:38 UTC Source report: https://urlscan.io/result/01a170c7-601f-71bf-ac2f-09b3a856145b/ - URLScan capture 2: https://urlscan.io/screenshots/01a166e9-4372-77aa-a1a9-e161b6cf5c25.png Captured: 2026-10-25 01:56:56 UTC Source report: https://urlscan.io/result/01a170c7-601f-71bf-ac2f-09b3a856145b/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/10d96311-39d0-404b-8339-695bee2b439e.png Captured: 2026-10-25 02:34:39 UTC Source report: https://radar.cloudflare.com/scan/10d96311-39d0-404b-8339-695bee2b439e SHA-256: 1e6fc9e320bf172c3393fea330276f672be82a6a2c065ca2a8d00bb3c8251662 - URLQuery: https://screenshots.phishdestroy.io/uq/da103976-5a16-4ee0-a1ea-3bf3969a42d4.png Source report: https://urlquery.net/report/da103976-5a16-4ee0-a1ea-3bf3969a42d4 SHA-256: abe46601b39f76719416057a5507d19291268ff1cd8ad069ce7ba6524f08ad32 - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a166e9-4372-77aa-a1a9-e161b6cf5c25.png Captured: 2026-10-23 03:58:51 UTC Source report: https://urlscan.io/result/01a166e9-4372-77aa-a1a9-e161b6cf5c25/ SHA-256: 468fedc33d5cbcd4772007a45c5cf8429419f8e8d0a96312bfbff458a20ac472 - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a170cb-4b78-732b-9d21-87b61891c003.png Captured: 2026-10-25 02:02:19 UTC Source report: https://urlscan.io/result/01a170cb-4b78-732b-9d21-87b61891c003/ SHA-256: 9a395282b995f1e57e5afb98a140ffad37b4fd460c0614b0eb16be6d0c42d6bb ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T02:13:33Z", "uuid": "01a170c7-601f-71bf-ac2f-09b3a856145b", "scanned_at": "2026-10-25T01:58:07Z", "final_url": "https://uniswapnews.wiki/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://uniswapnews.wiki/", "from": "http://uniswapnews.wiki/", "status": 307 } ], "ip": "5.104.72.82", "ptr": "5-104-72-82.hostingsecurityes.com", "domains": [ "maps.googleapis.com", "fonts.googleapis.com", "fonts.gstatic.com", "maps.gstatic.com", "www.google.com" ], "ips": [ "172.217.119.4", "142.251.211.67", "142.251.150.119", "142.250.68.202", "5.104.72.82" ], "asns": [ "15169", "200823" ], "countries": [ "US", "NL" ], "link_domains": [ "t.me", "wa.me" ], "social": [ "https://t.me/Xchange_Admins", "https://wa.me/14407390600" ], "doc_hash": "9b4c42d53e1382fa93026d2ba8cbb965e0ccf3e2fe5eaff0e69cd65b6bbdc081", "script_hashes": [ "200677bd63ea5e6b08b0cc23a9f615ae71ae2957037ede57f128b8ecfe45d7cf", "767c0f92aea34d3bc8e9faa3e5020e8fc0fefafcf1159a40cce9f9661fd11757", "60494ec8b30c0cb002f0a7730cd5a2787ffa3b280c8eb55321943521699c7d82", "f8571f020961f9e621a743b9e8f48ac0795d4048125dc4e576e39f437c9de5c5", "09421d378181062c222d481607a2e9d3714c7fff72a707a5bb488adccaa7a4fa", "b563ccc90a2f4828da2115024e783e7d52e7301468cf2e4acfa33d553068a2c5", "009881ef4e527426530836064970d95dcc85f028c746d80ba2330cff6b2f5533", "e26faf8dca79a460bfa0335549bd23fa76cf9daa66c754e00bba91b94e04f8a1", "33e1a33b3c212e5fc8d30c2d78f71ff640de91e1387f4221875cbc9d44da248b", "294caa7a6a3897ba3bb79e503fb7bcb720ba645205d918c6e47d647849d4d311" ], "globals": [ "uidEvent", "bootstrap", "jarallax", "$jscomp", "defaultSettings", "cookiesDirective", "invertHex", "checkConsentAndExecute", "getCookie", "setCookie", "checkIE", "disclosure", "SmoothScroll", "EventEmitter", "loadScript", "YOUTUBE_IFRAME_API_SRC", "YOUTUBE_STATES", "YOUTUBE_ERROR", "loadIframeAPICallbacks", "YouTubePlayer", "smartresize", "initSwitchArrowPlugin", "initTestimonialsPlugin", "Formoid", "isValidEmail", "formComponents", "formModalDOM", "formModal" ], "cookies": [ "landing_vid_J_dxYsw5KIujQ8oa" ], "storage_keys": [ "landing_visitor_J_dxYsw5KIujQ8oa" ], "tls": { "san": [ "uniswapnews.wiki" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "uniswapnews.wiki", "protocol": "TLS 1.3", "valid_to": "2027-01-20T14:40:28Z", "valid_from": "2026-10-22T14:40:29Z" }, "domain_age_days": 1, "apex_age_days": 1, "tls_age_days": 2, "tls_valid_days": 89, "requests": 52, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "openresty/1.31.1.1", "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "no-referrer", "permissions-policy": "interest-cohort=(), browsing-topics=(), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T02:37:35Z", "uuid": "10d96311-39d0-404b-8339-695bee2b439e", "scanned_at": "2026-10-25T02:34:39Z", "final_url": "https://uniswapnews.wiki/", "status": 200, "history": [ { "url": "https://uniswapnews.wiki/", "status": 200 } ], "dom_hash": "2e91c6e4f4af59722ea050ca5d4608ae9c81ebcdb9e66cea6d09f1984741ec33", "doc_hash": "9b4c42d53e1382fa93026d2ba8cbb965e0ccf3e2fe5eaff0e69cd65b6bbdc081", "domain_risks": [ "Newly Seen Domains", "Security Risks", "New Domains" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "uniswapnews.wiki", "type": "A", "value": "5.104.72.82" } ], "dnssec_valid": false, "ip": "5.104.72.82", "whois": { "registrar": "Gname.com Pte. Ltd.", "created": "2026-10-22T13:28:03Z", "updated": "2026-10-22T13:28:11Z", "expires": "2027-10-22T13:28:03Z", "nameservers": [ "ns1.gname-dns.com", "ns2.gname-dns.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T05:01:47Z", "analysis_at": "2026-10-24T07:56:32Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 1, "undetected": 36 }, "detections": { "alphaMountain.ai": "suspicious" }, "reputation": 0, "categories": { "alphaMountain.ai": "Suspicious (alphaMountain.ai)" }, "registrar": "Gname.com Pte. Ltd.", "created": "2026-10-22T13:28:03Z", "expires": "2027-10-22T13:28:03Z", "updated": "2026-10-22T13:28:11Z", "first_seen": "2026-10-22T15:44:55Z", "dns": [ { "ttl": 600, "type": "SOA", "rname": "master.share-dns.com", "value": "a.share-dns.com" }, { "ttl": 21600, "type": "NS", "value": "a.share-dns.com" }, { "ttl": 600, "type": "A", "value": "5.104.72.82" }, { "ttl": 21600, "type": "NS", "value": "b.share-dns.net" } ], "dns_at": "2026-10-24T08:09:12Z", "jarm": "21d19d00021d21d00042d43d00000091f9827a8676a9d9f27d421962a09b5d", "cert": { "san": [ "uniswapnews.wiki" ], "issuer": "Let's Encrypt / YR1", "serial": "5dba056f7b83095c9764464fe23924a2532", "sha256": "7af8c0505a63282702962ae70cb12d62bfb63449cba45cce2d135f107ee979eb", "subject": "uniswapnews.wiki", "valid_to": "2027-01-20T14:40:28Z", "valid_from": "2026-10-22T14:40:29Z" }, "whois": { "registrar": "Gname.com Pte. Ltd.", "registrar_iana_id": "1923", "registrar_url": "https://www.gname.com/", "created": "2026-10-22T13:28:03Z", "updated": "2026-10-22T13:28:11Z", "expires": "2027-10-22T13:28:03Z", "status": [ "addPeriod", "clientTransferProhibited", "serverTransferProhibited" ], "nameservers": [ "ns1.gname-dns.com", "ns2.gname-dns.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited", "server transfer prohibited" ], "events": { "expiration": "2027-10-22T13:28:03Z", "registration": "2026-10-22T13:28:03Z", "last update of RDAP database": "2026-10-22T13:28:11Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T02:40:43Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "uniswapnews.wiki" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-25T01:57:04Z", "first": "2026-10-25T01:57:04Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 8156 }, "robots_txt": { "agents": [ "*" ], "present": true }, "social_tags": { "title": "Orynex Talvo - Home" }, "trackers": { "requests": 49, "trackers": [ { "name": "Google", "company": "Google", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 3 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "Google Maps", "company": "Google", "country": "US", "category": "Utilities", "requests": 14 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 27, "wait": 112, "connect": 18, "download": 3 }, "response_ms": 162 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 38473, "co2_grams": 0.0014, "cleaner_than": 43 }, "dns_server": { "ns": [ { "ip": "172.64.53.25", "host": "a.share-dns.com" }, { "ip": "162.159.27.88", "host": "b.share-dns.net" } ], "zone": "uniswapnews.wiki" }, "cookies": { "cookies": [ { "name": "landing_vid_J_dxYsw5KIujQ8oa", "same_site": "Lax" } ] }, "location": { "ip": "5.104.72.82", "asn": "200823", "org": "MHost LLC", "city": "Eygelshoven", "country": "NL" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "uniswapnews.wiki" }, "dns": { "A": [ "5.104.72.82" ], "NS": [ "a.share-dns.com", "b.share-dns.net" ], "SOA": "{\"nsname\": \"a.share-dns.com\", \"hostmaster\": \"master.share-dns.com\", \"serial\": 1792678169, \"refresh\": 3600, \"retry\": 1200, \"expire\": 86400, \"minttl\": 600}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer", "xXSSProtection": false, "permissionsPolicy": "interest-cohort=(), browsing-topics=(), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), micr", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "5.104.72.82", "family": 4 }, "redirects": { "chain": [ "https://uniswapnews.wiki" ] }, "linked_pages": { "external": [ "https://t.me/Xchange_Admins", "https://wa.me/14407390600" ], "external_count": 2, "internal_count": 18 }, "whois": { "registrar": "Gname.com Pte. Ltd.", "created": "2026-10-22T13:28:03Z", "updated": "2026-10-22T13:28:11Z", "expires": "2027-10-22T13:28:03Z", "status": [ "clientTransferProhibited https://icann.org/epp", "serverTransferProhibited https://icann.org/epp", "addPeriod https://icann.org/epp" ], "nameservers": [ "ns2.gname-dns.com", "ns1.gname-dns.com" ] }, "headers": { "headers": { "server": "openresty/1.31.1.1", "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "no-referrer", "permissions-policy": "interest-cohort=(), browsing-topics=(), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()", "cross-origin-opener-policy": "same-origin" } } } } ```