unl-swap[.]com

The domain unl-swap.com was registered on August 05 2025 via Dynadot Inc. Since its appearance, it has been identified as a brand‑impersonation operation targeting Uniswap and classified as a crypto scam. The site has been taken offline, and its current HTTP status is offline. Threat intelligence feeds have listed the domain on two security blocklists, and it has been flagged by the PhishDestroy and ScamSniffer blocking services. VirusTotal analysis shows that 14 of 93 scanned security vendors flagged the domain as malicious, indicating a moderate consensus of malicious intent.

Gridinsoft assigned a trust score of 0 out of 100, reflecting an extremely low confidence in the domain's safety. No public IP address, hosting provider, or SSL certificate details are available in the current intelligence set, and no Safe Browsing or OTX entries have been reported. The lack of active hosting limits immediate forensic examination, but the presence of multiple independent detections confirms the domain’s involvement in fraudulent activity.

Defenders should ensure that outbound traffic to unl-swap.com is blocked at perimeter firewalls and DNS filtering layers, add the domain to internal blocklists, and monitor for any residual references in email or credential‑phishing campaigns. Incident response teams should also review recent logs for attempted connections to the domain prior to its takedown, and consider sharing the observed indicators with threat‑sharing communities to aid broader detection. Continued observation is advised in case the operators re‑host the impersonation site under a new domain or infrastructure.