v3[.]web-uniswap[.]to

This domain is flagged as an elevated-risk brand impersonation threat specifically targeting Uniswap, a leading decentralized exchange platform. Analysis indicates the infrastructure was designed to deceive users into believing they are interacting with the legitimate Uniswap interface, likely for the purpose of crypto asset theft or wallet compromise. Infrastructure analysis reveals multiple concrete indicators of malicious activity. The domain v3.web-uniswap.to was registered through the Government of Kingdom of Tonga on August 19, 2025, and resolves to the IP address 95.129.233.226. Security vendors on VirusTotal flagged the domain at a rate of 8/95, while Gridinsoft assigned a trust score of 0/100. The domain appears on one security blocklist and was previously blocked by PhishDestroy. Detected technologies include Nginx, and the page title explicitly mimicked Uniswap’s official branding: 'Uniswap: The Leading Decentralized Exchange Platform.' Mitigation against this type of brand impersonation requires heightened user awareness and technical controls. Users should verify domain authenticity by cross-referencing official communication channels and avoiding interaction with any domain not explicitly listed on the legitimate platform’s documentation. Wallet software should be configured to block connections to newly registered domains or those with poor reputation scores. Organizations should implement real-time domain monitoring to detect and block lookalike domains, particularly those using homoglyphs or subdomain spoofing techniques. Given the domain’s current offline status, continuous monitoring for reactivation or similar variants is recommended.