revoke-maplefinance[.]com

This domain, revoke-maplefinance.com, poses a direct credential harvesting threat targeting users of the decentralized exchange Uniswap. Analysis indicates the site was designed to impersonate legitimate cryptocurrency platforms, presenting a fake Maple Finance interface to deceive visitors into entering wallet recovery phrases or private keys. The infrastructure is configured to capture sensitive authentication details, which could enable immediate unauthorized access to victims' digital assets and financial accounts. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on September 30, 2025, through NiceNIC International Group Co., Limited, and is currently flagged by 11 out of 95 security vendors on VirusTotal. It appears on a single security blocklist and has been identified in one AlienVault OTX threat intelligence pulse. The site resolves to the IPv6 address 2606:4700:3036::6815:18f6, a Cloudflare network segment commonly exploited for hosting phishing infrastructure due to its anonymization capabilities. Users who visited revoke-maplefinance.com should immediately revoke any connected wallet sessions and transfer assets to a new secure wallet. All credentials entered on the site should be considered compromised, and multi-factor authentication should be enabled on all associated accounts. A full system scan using updated security tools is recommended to detect potential secondary infections. Wallet addresses used on the site should be monitored for unauthorized transactions, and any suspicious activity should be reported to relevant blockchain security teams for further investigation.