uniswap-protocol-dex-relay-v250[.]vercel[.]app

This domain was added to a security blocklist on an unspecified date and is currently listed by PhishDestroy as a blocked indicator. The subdomain uniswap-protocol-dex-relay-v250.vercel.app follows the naming pattern of legitimate Uniswap services, suggesting an attempt to lure cryptocurrency users. The threat classification supplied is “crypto drainer”, indicating that the site is intended to solicit private keys or seed phrases to transfer assets to an attacker‑controlled wallet.

No additional intelligence such as SSL certificate details, HTTP response codes, or hosting IP addresses has been published, and the domain has not been observed in other public blocklists or reputation feeds. Because the domain resolves to the Vercel hosting platform, it benefits from a reputable CDN, which can mask malicious activity from surface‑level checks. The limited detection footprint (one blocklist) implies that the campaign may be in an early stage or operating under a low profile.

Defenders should block the exact hostname at perimeter firewalls and DNS filtering solutions, monitor network traffic for outbound connections to the Vercel endpoint, and enforce strict user education on never disclosing wallet credentials. Incident response teams should treat any credential submission to this domain as compromised and initiate immediate key rotation and fund movement to secure wallets. Continued hunting for related subdomains and correlation with known crypto‑drainer patterns is recommended while the investigation remains open.