app-uniswxp[.]org

This domain, app-uniswxp.org, is identified as a credential harvesting phishing site designed to mimic legitimate login portals and capture user credentials. Analysis indicates the infrastructure was specifically engineered for short-term phishing campaigns, leveraging obfuscation techniques to avoid immediate takedowns. The domain presents itself as a trusted service, often redirecting victims through social engineering tactics such as fake security alerts or account verification prompts. Infrastructure analysis reveals multiple high-confidence threat indicators. The domain was registered on August 28, 2025, through OwnRegistrar, Inc., and resolves to the IP address 172.67.185.144, hosted on Cloudflare’s network (AS13335). Security vendors have flagged this domain in VirusTotal, with 9 out of 95 engines detecting malicious activity. Additionally, it appears on two security blocklists, and its SSL certificate (WE1) lacks proper validation, further confirming its fraudulent nature. Users who visited app-uniswxp.org should immediately revoke any entered credentials, particularly for financial or email accounts. It is recommended to scan affected devices for malware, as phishing sites may deploy secondary payloads. Monitor accounts for unauthorized activity and enable multi-factor authentication where available. Given the domain’s recent creation and Cloudflare-hosted infrastructure, users should remain vigilant for similar phishing attempts leveraging the same registrar or hosting provider.