v4uniswap[.]org

PhishDestroy identifies v4uniswap.org as a brand impersonation domain targeting Uniswap users. This domain is designed to deceive visitors into believing they are accessing the legitimate Uniswap platform (uniswap.org), likely to deploy cryptocurrency drainer kits that steal funds from connected wallets. The threat actor leverages brand recognition to trick users into connecting their wallets or entering sensitive credentials, posing a significant risk to cryptocurrency holdings.

This domain was flagged with a VirusTotal detection score of 2/95, indicating it has not yet been widely recognized as malicious by security vendors. The domain uses a Sectigo Limited SSL certificate, suggesting an attempt to appear legitimate. However, the registrar and creation date remain unverified in open-source intelligence, which is a common tactic among malicious actors to obscure their tracks. As of the latest assessment, this domain has not been added to Google Safe Browsing (GSB) and remains unblocked by most blocklists, increasing the likelihood of user exposure.

The current status of v4uniswap.org is active, with no immediate takedown actions observed. Users are strongly advised to avoid interacting with this domain and to verify the official Uniswap website (app.uniswap.org) before connecting wallets or entering sensitive information. Remaining risk is high due to low detection rates and the absence of blocklist entries. PhishDestroy continues to monitor this domain and urges users to report any suspicious activity to ensure timely mitigation.