unlswap[.]org-app-wallet-apiv2[.]com

The domain unlswap.org-app-wallet-apiv2.com was identified as a brand impersonation threat specifically targeting Uniswap, a decentralized cryptocurrency exchange platform. This domain was designed to mimic legitimate Uniswap API and wallet infrastructure, likely to facilitate credential harvesting or unauthorized transaction signing. As of the latest analysis, the domain has been taken offline, though prior activity remains a concern for users who may have interacted with it. Analysis indicates the domain was flagged by 11 of 95 security vendors on VirusTotal, a notably high detection rate for a recently created domain. Infrastructure records show the domain was registered on February 21, 2026, though registrar details remain undisclosed. The domain appeared on two independent security blocklists, and its page title matched the domain name itself, a common tactic to appear legitimate. No associated IP addresses or hosting providers were publicly attributed at the time of assessment. The current offline status reduces immediate risk, but the domain's prior existence warrants caution. Users who accessed this domain should assume potential exposure of wallet credentials or private keys. Recommended actions include revoking any connected dApp permissions, rotating private keys, and monitoring transaction histories for unauthorized activity. Organizations should update blocklists to include this domain and its known indicators, while users should verify domain authenticity before interacting with any Uniswap-related services.