unlswap[.]vercel[.]app

This domain, unlswap.vercel.app, is identified as a high-risk brand impersonation threat targeting the Uniswap decentralized exchange platform. The site presents itself as a legitimate crypto trading interface, potentially luring users into disclosing sensitive wallet credentials or executing unauthorized transactions. Current analysis confirms the domain remains active and operational as of the latest verification. Infrastructure analysis reveals the domain is registered through Vercel Inc. and resolves to the IP address 64.29.17.195, associated with Amazon.com, Inc. (AS16509) in the United States. The SSL certificate is issued by Google Trust Services under the WR1 intermediate. Security vendor detections on VirusTotal indicate 6 of 95 engines flag the domain as malicious, while it appears on at least one security blocklist, specifically PhishDestroy. The page title, 'Uniswap | Trade Crypto on DeFi's Leading Exchange,' directly mirrors the branding of the authentic Uniswap platform, reinforcing the impersonation attempt. The domain continues to pose an active risk to users, particularly those engaging with decentralized finance protocols. Immediate mitigation steps include blocking the domain at the network level and adding it to enterprise and consumer security blocklists. Users who may have interacted with the site should revoke any connected wallet authorizations, monitor transaction histories for unauthorized activity, and rotate credentials associated with their crypto wallets. Organizations should treat this domain as a confirmed threat vector and prioritize awareness training to prevent credential compromise or financial loss.