unitswap[.]pro

unitswap.pro is a domain flagged for brand impersonation, specifically targeting the Ethereum brand. The domain is currently offline and has been taken down. Analysis indicates that this domain was created on February 21, 2026, and has been flagged by 17 out of 95 VirusTotal vendors as potentially malicious. The domain resolves to the IP address 62.171.168.46, which is located in France and is part of the AS51167 Contabo GmbH network. The domain has appeared on 1 security blocklist, and its SSL certificate is rated E7, indicating a low level of trust.

Infrastructure analysis reveals that unitswap.pro was registered with a registrar that has not been explicitly named. The page title found during the investigation was 'Uniswap Interface,' which is a clear attempt to impersonate the legitimate Uniswap platform. The domain's creation date of February 21, 2026, and its brief active period suggest a targeted and short-lived campaign. The elevated risk level is attributed to the domain's potential to deceive users into believing they are interacting with a legitimate Ethereum service.

The domain is currently offline, and no further active phishing attempts are observed. However, to prevent future incidents, it is recommended that users verify the URL and SSL certificate of any platform they interact with, especially those related to cryptocurrency. Network administrators should monitor for any similar domains and block access to them. Security teams should also consider adding this domain to their blocklists and alerting users about the risks of brand impersonation.