uniswapng[.]com

This domain, uniswapng.com, was registered through NameCheap on August 29 2025 and is currently taken offline. The site presented the page title “Uniswap – Buy & Sell Made Simple,” indicating a direct impersonation of the Uniswap brand for a crypto‑scam campaign. Technical inspection shows the domain resolves to the IPv4 address 38.242.155.150, which belongs to Contabo GmbH in France (AS51167). The hosting environment runs Ubuntu with an Nginx web server and utilizes Zoho services for email, as reflected in the MX records pointing to mx.zoho.com and mx2.zoho.com. No TLS certificate was observed, meaning the site served only HTTP.

Reputation data note that the domain appears on one security blocklist and has a Gridinsoft trust score of 0 out of 100, reflecting a highly malicious assessment. VirusTotal analysis recorded detections from 17 of 95 scanning engines, confirming that multiple vendors flag the domain as malicious. AlienVault OTX references the domain in 17 threat‑intel pulses, reinforcing its association with malicious campaigns. The nameservers pdns1.registrar-servers.com and pdns2.registrar-servers.com are typical of the registrar and do not provide additional mitigation.

The site has been blocked by PhishDestroy. Because the domain is offline, active probing is not possible, but defenders should continue to block any traffic to 38.242.155.150 and add uniswapng.com to internal deny lists. Monitoring of the Contabo hosting provider for related infrastructure is advisable, as is reviewing email logs for communications originating from the Zoho MX hosts that reference Uniswap‑related subjects. Further investigation is required to determine whether additional sub‑domains or related IPs are being leveraged for the same campaign.