bafybeifz7lwau4w4z7awqjzujhgnff4lpwxrj533xk3n6skzpjmvzpyhvi[.]ipfs[.]dweb[.]link

Analysis of the domain bafybeifz7lwau4w4z7awqjzujhgnff4lpwxrj533xk3n6skzpjmvzpyhvi.ipfs.dweb.link indicates an active brand impersonation campaign targeting Uniswap. The site is registered through CSC Corporate Domains, Inc. and resolves to the IP address 209.94.90.3, which is geolocated to the United States and associated with Protocol Labs. Infrastructure details show Cloudflare nameservers tate.ns.cloudflare.com and clarissa.ns.cloudflare.com, and the TLS certificate is issued by Let’s Encrypt (E8). HTTP responses return status 200 and the page title is "Uniswap Interface". VirusTotal scans have flagged the domain in 18 of 91 security vendor checks, and the domain appears on three public blocklists, including PhishDestroy, MetaMask, and SEAL. While the hosting details and certificate are typical of legitimate services, the combination of brand impersonation, high detection count, and blocklist presence confirms malicious intent. Defenders should proactively block the domain at network perimeter and DNS layers, monitor outbound connections to 209.94.90.3, and update endpoint protection signatures to include the observed indicator set. Continued surveillance is advised to detect any evolution of the payload or changes in hosting infrastructure.