swaptrad[.]net[.]uniswap-trade[.]net

Analysis of the domain swaptrad.net.uniswap-trade.net indicates a confirmed crypto scam targeting the Uniswap brand. The domain was registered on October 18, 2025, through Dynadot LLC and resolves to the IP address 192.250.229.83, hosted by WHG Hosting Services Ltd (AS209341) in Germany. No SSL certificate is present, increasing the risk of interception or manipulation of user data. The page title explicitly displays 'Uniswap,' aligning with the identified brand impersonation threat type. Infrastructure analysis reveals the domain uses nameservers ns1.mysecurecloudhost.com and ns2.mysecurecloudhost.com, a pattern observed in other low-reputation hosting environments.

Detection metrics show limited but clear indicators of malicious activity: the domain appears on one security blocklist, and 16 of 95 security vendors on VirusTotal flagged it as malicious. Gridinsoft assigned a trust score of 0/100, further corroborating its high-risk classification. The domain is currently offline, though its prior operational status and detection history suggest it was actively used in phishing campaigns. Defenders should treat this domain as a confirmed threat vector for crypto-related fraud.

Given its registration date, hosting provider, and detection profile, it is likely part of a broader campaign leveraging lookalike domains to deceive users. Organizations should block the domain and IP at the network level, monitor for related infrastructure (e.g., subdomains, shared IPs, or nameservers), and alert users to the risk of Uniswap-branded phishing sites. The absence of SSL and the domain's presence on a blocklist (PhishDestroy) provide additional justification for proactive mitigation. Further investigation into the hosting provider and registrar may reveal linked malicious domains.