uni-swapv4[.]xyz

Analysis of the domain uni-swapv4.xyz shows multiple indicators of malicious activity targeting the Uniswap brand. The domain was registered on February 21, 2026 and resolves to the IP address 148.72.153.160, which is geolocated in the United States and belongs to AS30083 (velia.net). The SSL certificate associated with the host is rated R11, a score that typically reflects poor trustworthiness. Gridinsoft assigns the domain a trust score of 0 out of 100, indicating a lack of legitimacy.

The page title returned by the server is "Uniswap Interface," directly matching the brand target Uniswap and confirming the impersonation intent. The site has been categorized as a crypto scam, and it appears on one security blocklist. PhishDestroy has actively blocked the domain, and VirusTotal reports that 2 of 93 security vendors have flagged it as malicious.

The current operational status is offline, suggesting the hosting has been taken down, but the historical evidence remains relevant for threat intelligence. Defenders should continue to deny any network connections to 148.72.153.160, add uni-swapv4.xyz to internal blocklists, and monitor for any re‑hosting attempts or related domains that reuse the same IP range or SSL characteristics. Ongoing vigilance is advised because the recent registration date and low trust scores imply that the actors may redeploy similar infrastructure under new names.