uniswap[.]org-app-v2-connect[.]com

This domain is flagged as an elevated-risk crypto wallet drainer targeting Uniswap users through brand impersonation. Analysis indicates the site was designed to mimic legitimate Uniswap web3 connection flows, likely to trick users into signing malicious transactions that drain cryptocurrency assets from connected wallets. The threat type, crypto wallet drainer, is a specialized form of credential theft focused on blockchain interactions rather than traditional login credentials. Infrastructure analysis reveals the domain uniswap.org-app-v2-connect.com was registered on February 21, 2026, through Web Commerce Communications Limited. It resolved to IP address 172.67.221.182, hosted on Cloudflare infrastructure (AS13335) in the United States. The domain appears on 2 security blocklists and is blocked by PhishDestroy and ScamSniffer. VirusTotal detection shows 10 out of 95 security vendors flagging the domain as malicious. The SSL certificate was issued by Google Trust Services (WE1), and the page title returned a 401 Authorization Required error, suggesting either takedown or access restrictions. Mitigation requires immediate action from both end users and security teams. Users who connected wallets to this domain should revoke all smart contract approvals via blockchain explorers or dedicated revocation tools, then transfer assets to new wallet addresses. Security teams should add the domain and associated IP 172.67.221.182 to web filtering systems and SIEM correlation rules. Wallet providers should implement transaction simulation warnings for any interactions with this domain's historical smart contract addresses. The creation date anomaly (2026) suggests either typo-squatting or deliberate future-dating to evade initial detection, warranting additional scrutiny of similarly structured domains.