uniswaprpc[.]pages[.]dev

The domain uniswaprpc.pages.dev was registered on December 15, 2025 through Cloudflare, Inc. and is hosted on Cloudflare's network (AS13335) with the IP address 188.114.96.3 located in the United States. The authoritative nameservers are donovan.ns.cloudflare.com and mary.ns.cloudflare.com, indicating the use of Cloudflare's DNS service. The site presented the page title “MainNet Project”, which does not directly reference the targeted brand, but the intelligence file lists Uniswap as the impersonated brand and classifies the operation as a crypto‑scam. The SSL certificate identifier “WE1” was observed, and the site enforced HSTS and HTTP/3, both typical of Cloudflare‑protected services.

The domain appears on a single security blocklist and was flagged by PhishDestroy as taken offline. VirusTotal analysis shows that five of ninety‑four scanners flagged the domain, suggesting malicious behavior despite the relatively low detection count. No additional evidence such as screenshots or login page content is available, so the exact user‑facing tactics remain unknown. Defenders should block DNS resolution to 188.114.96.3 for the domain uniswaprpc.pages.dev, add the domain to web‑filter and email‑gateway blocklists, and monitor for any newly observed subdomains under the same Cloudflare account.

Since the site is already offline, continued observation of the registrar’s activity and any re‑registration attempts is recommended. Organizations that use Uniswap services should educate users about the risk of unsolicited links claiming to be related to Uniswap and advise verification of URLs before entering wallet credentials. Incident response teams should treat any credential or private‑key submissions to this domain as compromise and initiate appropriate containment and credential rotation procedures.