unisvvapp[.]com

This domain, unisvvapp.com, is flagged as an active high-risk phishing campaign impersonating the Uniswap decentralized exchange platform. Analysis indicates the site employs brand impersonation tactics, presenting a fraudulent interface titled 'Uniswap Interface' to deceive users into divulging wallet credentials or authorizing malicious transactions. The infrastructure is designed to mimic legitimate cryptocurrency services, increasing the likelihood of successful social engineering attacks against unsuspecting victims. Infrastructure analysis reveals the domain was registered on June 15, 2024, through Dynadot Inc, and currently resolves to the IP address 188.114.96.3. Detection metrics show 13 out of 95 security vendors on VirusTotal have flagged the domain as malicious, while it appears on three distinct security blocklists. The SSL certificate is issued by Google Trust Services (WE1), providing a superficial layer of legitimacy. Despite these indicators, the domain remains accessible and unmitigated at the time of analysis. Current status confirms the domain is still active, with no evidence of takedown or sinkholing. Response actions by security entities include blocking by multiple threat intelligence feeds, though the domain continues to pose a residual risk to users who may encounter it through phishing links or malicious advertisements. Recommendations include immediate blacklisting of the domain and IP, monitoring for associated infrastructure, and user education on verifying legitimate service URLs to prevent credential compromise or asset theft.