unisxap-un-changes[.]gitbook[.]io

The domain unisxap-un-changes.gitbook.io is a confirmed phishing site engaged in brand impersonation targeting Ethereum users, specifically mimicking the Uniswap Protocol. It poses a cryptocurrency scam threat, designed to deceive victims into disclosing wallet credentials or authorizing malicious transactions. As of the latest verification, unisxap-un-changes.gitbook.io has been taken offline, though it previously operated without an associated drainer kit.

Technical analysis reveals unisxap-un-changes.gitbook.io was registered through Cloudflare, Inc. on February 21, 2026, resolving to the IP address 104.18.40.47 (US, AS13335 Cloudflare, Inc.). The domain showed 0 of 95 detections on VirusTotal and was not flagged by Google Safe Browsing, though it appeared on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'Home | Uniswap Protocol'. Technologies detected include Cloudflare and HTTP/3, with a Gridinsoft trust score of 0/100.

Users who interacted with unisxap-un-changes.gitbook.io should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. Enable two-factor authentication on all accounts and monitor for unauthorized transactions. Report the domain to relevant platforms, including the impersonated brand (Uniswap/Ethereum), the registrar (Cloudflare), and threat-sharing communities such as PhishTank or the Anti-Phishing Working Group to aid in mitigation efforts.