uniswap-973[.]pages[.]dev

This domain is flagged as a high-risk brand impersonation threat specifically targeting Uniswap, a prominent decentralized cryptocurrency exchange. Analysis indicates the site is designed to deceive users into believing they are interacting with the legitimate Uniswap platform, potentially facilitating unauthorized transactions or data harvesting under false pretenses. Infrastructure analysis reveals the following concrete indicators: the domain uniswap-973.pages.dev was registered on August 25, 2025, through Cloudflare, Inc., and resolves to the IP address 172.66.44.245, hosted on AS13335 (Cloudflare, Inc.) in the United States. The page title, PaxSwap, further deviates from the expected Uniswap branding, a common tactic in impersonation schemes. Security vendors on VirusTotal flag this domain at 2/95, and it appears on one security blocklist, with PhishDestroyer being one confirmed source of detection. The SSL certificate is issued by Google Trust Services (WE1), which, while legitimate, does not mitigate the underlying fraudulent intent. Mitigation steps for this specific threat type include immediate domain blacklisting across all network security layers, particularly in environments handling cryptocurrency transactions. Organizations should deploy real-time brand monitoring to detect similar impersonation attempts, focusing on domains leveraging Cloudflare Pages or other content delivery networks to obfuscate origins. End-users should be educated to verify domain authenticity by cross-referencing official communication channels and checking for subtle discrepancies in branding, such as mismatched page titles or unexpected redirects. Given the active status of this domain, proactive takedown requests should be submitted to the registrar and hosting provider with evidence of fraudulent activity.