uniswap-global[.]limited

The domain uniswap-global.limited was registered on 21 February 2026 through Atak Domain Bilgi Teknolojileri A.Ş. and is currently resolved to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) located in the United States. The nameserver configuration uses Cloudflare’s authoritative servers darwin.ns.cloudflare.com and mallory.ns.cloudflare.com, and the site is served over HTTPS with a certificate issued by Google Trust Services under the WE1 root, indicating a valid TLS chain. HTTP traffic is observed to be delivered via Cloudflare’s HTTP/3 implementation. The page title returned by the server is “uniswap-global.limited | 522: Connection timed out”, suggesting that the origin server failed to respond within Cloudflare’s timeout window. The domain is flagged by six of ninety‑three VirusTotal scanners, and it appears on a single external blocklist.

PhishDestroy has actively taken the domain offline, and the current status is reported as offline. Brand analysis shows the domain is explicitly targeting the Uniswap brand, and the listed scam type is a crypto‑related scam. No additional payload or landing‑page content has been captured, so the exact malicious behavior—such as credential harvesting, wallet address substitution, or transaction redirection—remains unverified. Detection by six VirusTotal vendors aligns with the classification by PhishDestroy, reinforcing the elevated risk rating assigned to the infrastructure. The single security blocklist listing further confirms that the domain has been recognized by at least one external feed, supporting automated blocklist enforcement.

Given the infrastructure, defenders should continue to block the domain at DNS and network layers, monitor for any re‑hosting of the same hostnames on alternative IP ranges, and add the IP 188.114.96.3 to threat‑intel feeds where appropriate.