app[.]unisweap[.]info

This domain, app.unisweap.info, is a documented brand impersonation targeting Uniswap, a decentralized finance platform. Analysis indicates the domain was registered on February 21, 2026, through NameSilo, LLC, a known registrar. The domain resolves to IP address 188.114.96.3, hosted on AS13335 (Cloudflare, Inc.) in the United States. Its nameservers are quentin.ns.cloudflare.com and tessa.ns.cloudflare.com. The page title observed was 'Uniswap | Trade crypto and NFTs safely on the top DeFi platform', confirming the impersonation of Uniswap's legitimate branding.

The SSL certificate is identified as WE1. As of the report date of July 24, 2026, the domain is offline. Detection data shows that 2 of 93 security vendors on VirusTotal flagged this domain as malicious. It appears on 2 security blocklists and is specifically blocked by PhishDestroy and ScamSniffer. Gridinsoft assigned a trust score of 0 out of 100, indicating a strong likelihood of malicious intent.

The scam type is categorized as a crypto scam. Defenders should ensure that any users who may have visited this domain are warned about potential credential theft or crypto wallet compromise. Monitoring for similar domains using variations of 'unisweap' or 'uniswap' is recommended, as this incident suggests an active phishing campaign against Uniswap users. The precise method of compromise (e.g., credential harvesting or crypto drainer) is not confirmed from the available data, but the brand impersonation and detection by specialized phishing blocklists point to a targeted attack. No other infrastructure details, such as associated IP ranges or related domains, are provided in this intelligence.