uniswapwallets[.]web[.]app

Analysis of the domain uniswapwallets.web.app indicates a brand impersonation campaign targeting Uniswap, a decentralized finance (DeFi) platform. The domain was registered through Google Firebase and hosted on infrastructure associated with Fastly, Inc. (AS54113), resolving to the IP address 199.36.158.100, located in the United States. The page title, 'Uniswap | Trade crypto and NFTs safely on the top DeFi platform,' directly mimics Uniswap's branding, suggesting an intent to deceive users into believing the site is legitimate. Infrastructure analysis reveals the use of Firebase, HSTS, and HTTP/3 technologies, which are consistent with modern web applications but do not inherently indicate malicious activity.

The domain was flagged by one security blocklist (PhishDestroy) and classified as a crypto scam. As of July 24, 2026, the domain returns an HTTP 404 status, indicating it is currently offline. The SSL certificate is issued by Google Trust Services (WR4), a legitimate certificate authority, which does not preclude malicious use. No detections were reported by the 95 vendors that scanned the domain on VirusTotal, though the absence of detections does not confirm safety.

The domain's registration via Google Firebase and its hosting on Fastly's infrastructure are notable, as these services are occasionally exploited for phishing due to their accessibility and reputation. Defenders should treat this domain as suspicious based on its impersonation of Uniswap, the single blocklist flag, and its classification as a crypto scam. Further monitoring is recommended to assess any resurgence of activity, and organizations should consider proactively blocking access to this domain pending additional evidence of legitimacy or malicious intent.