uniswap-community[.]web[.]app

uniswap-community.web.app is currently offline but was observed serving an HTTP 404 response while presenting a TLS certificate issued by Google Trust Services under the WR4 label. The domain resolves to 142.250.185.100, an address owned by AS15169 Google LLC located in the United States. Infrastructure analysis shows the site was hosted on Google Firebase and employed modern transport features including HSTS and HTTP/3. The page title returned by the web server is “Google”, which does not correspond to the claimed brand target Uniswap and suggests a generic placeholder rather than a crafted login page. The domain was flagged by PhishDestroy and appears on a single external blocklist, indicating that at least one reputable anti‑phishing source has taken action against it.

No evidence of malicious payloads or active phishing pages was captured; the HTTP status of 404 implies that the content was removed or never existed. The registration information lists Google Firebase as the registrar, consistent with the hosting provider. VirusTotal scans by 95 vendors reported no detections, but the absence of alerts does not confirm safety and must be interpreted cautiously. The primary uncertainty is whether the domain ever hosted a functional impersonation page or if the 404 response reflects a rapid takedown after initial abuse.

Defenders should continue to monitor DNS resolutions for this host, ensure that any inbound traffic to 142.250.185.100 is inspected for anomalous requests targeting Uniswap‑related URLs, and maintain the block on the domain in web filtering solutions. Because the domain uses a trusted SSL certificate, standard certificate‑based allowlists may not be sufficient; additional heuristic or reputation checks are recommended. Logging of TLS handshakes and HTTP status codes can aid in detecting future re‑activations.