uniwsap[.]github[.]io

This domain, uniwsap.github.io, is flagged as a high-risk brand impersonation phishing site targeting Across, a decentralized finance protocol. Analysis indicates the page mimics the Uniswap interface, using the title 'Uniswap - Web and Wallets | Uniswap' to deceive users into interacting with malicious wallet-draining infrastructure. No explicit drainer kit signatures were identified, but the domain exhibits behavioral patterns consistent with credential harvesting and token theft operations.

Infrastructure analysis reveals the following technical indicators: the domain is hosted on 185.199.108.153 (AS54113, Fastly, Inc., US), with a Let's Encrypt SSL certificate (R12). It was registered through GitHub, Inc., on March 08, 2026, and is currently flagged by Google Safe Browsing as phishing. Detection metrics include 9/95 security vendor flags on VirusTotal and presence on three independent security blocklists, including PhishDestroy, MetaMask, and SEAL.

The domain remains active as of this report, with no evidence of takedown or mitigation. Response actions by security providers have included blocking at the browser and extension level, but the underlying infrastructure persists. The remaining risk is classified as high due to the domain's continued operation, brand impersonation tactics, and unresolved detection flags. Organizations are advised to implement network-level blocking for the domain and IP, monitor for related subdomains, and educate users on identifying impersonation attempts targeting decentralized finance platforms.