puniswap[.]org

This domain, puniswap.org, is under investigation for brand impersonation targeting Uniswap, a prominent decentralized finance platform. Analysis indicates the site mimics legitimate Uniswap branding to deceive users into interacting with fraudulent interfaces, potentially facilitating unauthorized transactions or credential harvesting. No explicit crypto drainer kit signatures have been identified at this stage, though behavioral indicators align with known impersonation tactics observed in prior campaigns. Infrastructure analysis reveals the domain was registered on October 30, 2025, through NameSilo, LLC, and currently resolves to the IP address 104.21.3.131. The site employs Cloudflare services, including HTTP/3 and a Google Trust Services SSL certificate, which may obscure backend infrastructure details. Detection metrics show minimal coverage: VirusTotal reports 0 detections out of 95 engines, and the domain appears on a single security blocklist, specifically Maltrail. No entries were found in Google Safe Browsing at the time of analysis. Current status remains active, with no confirmed takedown or mitigation actions observed. The low detection rate and use of reputable hosting infrastructure suggest the campaign may still be in an early or evasive phase. Users are advised to verify domain authenticity through official channels before interacting with decentralized finance platforms. Organizations should monitor for additional indicators of compromise, including transaction anomalies or unauthorized access attempts linked to this domain.