uniswap[.]uzheths[.]blockchain-group[.]ch

This domain poses a high risk as a brand impersonation threat specifically targeting Uniswap. The domain uniswap.uzheths.blockchain-group.ch attempts to deceive users by mimicking the official Uniswap platform to steal credentials, private keys, or funds. Such phishing attacks are particularly dangerous in the DeFi space due to the irreversible nature of cryptocurrency transactions.

Technical indicators confirm the malicious nature of this domain. VirusTotal analysis shows 18 out of 95 security vendors flagging the domain as malicious. The domain resolves to IP 8.211.31.33, which is associated with other phishing campaigns. The SSL certificate is issued by Let's Encrypt (YE2), a common choice for phishing sites due to its free and automated issuance. Google Safe Browsing flags the domain for phishing. The domain is currently active, increasing the risk of ongoing attacks.

To mitigate this threat, users should avoid interacting with the domain entirely. Organizations should block the domain at the network perimeter and add it to blocklists. End users are advised to verify URLs carefully before entering credentials or connecting wallets, and to use browser security extensions. Report the domain to Google Safe Browsing and other threat intelligence platforms to help protect others. Regular security awareness training on recognizing brand impersonation can reduce the likelihood of successful phishing attempts.