app-unlswap[.]finance

app-unlswap.finance was registered on 2026-02-21 through Devexpanse Ltd d/b/a Regery.com and is presently taken offline. The site presented the page title “Uniswap | Trade Crypto on DeFi’s Leading Exchange”, indicating an attempt to masquerade as the official Uniswap platform. The domain resolves to the IP address 188.114.96.3, which belongs to the Cloudflare network (AS13335) located in the United States. SSL analysis shows the certificate labeled WE1, confirming the use of TLS but offering no indication of legitimacy.

Reputation services place the domain on four independent blocklists—PhishDestroy, Polkadot, Enkrypt and Codeesura—and a Gridinsoft trust score of 0 / 100, reflecting an extreme lack of trust. VirusTotal scans returned 12 positive detections out of 93 submitted security vendors, reinforcing the malicious classification. The intelligence tags the activity as a crypto‑scam with brand impersonation across the Uniswap brand.

No additional content or HTTP response details are available because the site is offline, so the exact payload or credential‑harvesting mechanisms remain unverified. Defenders should block the domain at perimeter filters, add the IP 188.114.96.3 to deny‑list entries, and monitor for any future re‑hosting of the same certificate or similar page titles. Ongoing observation of the registrar and associated ASN is advised to detect possible re‑registration attempts.