unisvap[.]godaddysites[.]com

This domain, unisvap.godaddysites.com, is flagged as a brand impersonation threat targeting Uniswap, a decentralized cryptocurrency exchange. Analysis indicates the site was designed to deceive users into interacting with fraudulent smart contracts or disclosing wallet credentials, likely functioning as a crypto drainer. The page title, 'Uniswap | Home,' mimics legitimate branding to exploit user trust in the Uniswap platform, increasing the likelihood of successful social engineering attacks.

Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on February 21, 2026, and resolved to IP address 13.248.243.5 (AS16509, Amazon.com, Inc.). The domain appears on one security blocklist and is flagged by 18 out of 95 security vendors on VirusTotal. The SSL certificate, issued by Go Daddy Secure Certificate Authority - G2, does not mitigate the risk, as fraudulent domains frequently use valid certificates to appear legitimate. The domain has since been taken offline, but residual risk remains for users who may have engaged with it prior to deactivation.

Users who visited unisvap.godaddysites.com should immediately revoke any wallet permissions granted to unknown smart contracts and monitor their cryptocurrency transactions for unauthorized activity. It is recommended to scan local devices for malware, as interactions with such domains may have exposed users to secondary payloads. Additionally, affected users should report the incident to relevant blockchain security platforms and consider rotating credentials for any accounts accessed during the suspected compromise window.