uniswap-protocol-dex-relay-v166[.]vercel[.]app

The domain uniswap-protocol-dex-relay-v166.vercel.app is currently listed on a security blocklist and has been actively blocked by the PhishDestroy service, providing concrete evidence that threat intelligence sources have classified it as malicious. The specific threat associated with this host is a crypto‑drainer operation, wherein adversaries attempt to illicitly divert cryptocurrency assets from victims who interact with the site. VirusTotal records indicate that the URL was scanned by ninety‑one independent vendors; none of those engines raised a detection at the time of scanning. Although the absence of detections might suggest a low‑profile footprint, the blocklist entry and PhishDestroy action demonstrate that the domain is being used for illicit activity.

Infrastructure details such as registrar, IP address, hosting provider, SSL certificate parameters, HTTP response codes, and page title are not disclosed in the available intelligence, limiting a deeper technical fingerprint at this stage. The domain resides under the vercel.app subdomain space, which is commonly associated with Vercel's cloud‑hosting platform, but no further hosting attributes have been published. Risk status is marked as active and under investigation, and the threat type is explicitly identified as a crypto drainer.

Defenders should treat the domain as hostile: it should be added to web‑filter deny lists, DNS‑level blocking policies, and endpoint protection rules. Continuous monitoring of DNS resolution, any future VirusTotal or threat‑intel updates, and correlation with internal logs is recommended. Organizations handling cryptocurrency assets should enforce strict transaction verification controls, limit exposure to unsolicited URLs, and educate users about the risk of interacting with this address.