unlswarp[.]cc

This domain, unlswarp.cc, is a confirmed phishing site targeting Uniswap users. Analysis of available intelligence reveals several indicators of malicious intent. The domain was flagged by 9 out of 95 security vendors on VirusTotal, indicating broad consensus among detection engines that it is malicious. It currently appears on 1 security blocklist and is blocked by the PhishDestroy service. The Gridinsoft trust score is 0 out of 100, reflecting a complete lack of trustworthiness.

The domain was registered on August 26, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar sometimes associated with low-effort or spam registrations. It resolves to IP address 104.21.48.1, which is hosted by Cloudflare, Inc. (AS13335) in the United States. The page title observed was FASTPANEL, which is a default hosting panel page, suggesting the domain may have been set up but not fully configured with phishing content at the time of analysis, or it was taken offline before a landing page was served. An SSL certificate (type WE1) was present, providing HTTPS encryption, which is common for phishing sites to appear legitimate. The domain is currently offline, meaning it is no longer resolving or serving content.

Defenders should block the domain at the network level, add it to their blocklists, and monitor for any related subdomains or new registrations using similar naming patterns (e.g., unlswap variants). The exact phishing page content was not captured, but given the impersonation of Uniswap (a decentralized exchange), the site likely aimed to steal cryptocurrency wallet credentials or seed phrases. No Safe Browsing or OTX data was available in the intelligence provided, so those checks remain unconfirmed. The domain is considered a confirmed threat based on the high detection rate, zero trust score, and brand impersonation classification.