src-uniswap[.]org

The domain src-uniswap.org was registered on February 21 2026 through Dynadot LLC and is currently hosted behind Cloudflare’s network (AS13335) with the IP address 172.67.191.35 located in the United States. The DNS configuration uses the Cloudflare nameservers nola.ns.cloudflare.com and titan.ns.cloudflare.com, and the site presents a Google Trust Services‑issued SSL certificate (WE1), indicating that HTTPS is correctly configured. The web server responded with HTTP status 403 and the Cloudflare‑generated page title “Suspected phishing site | Cloudflare”, confirming that the content has been taken offline by the provider. Multiple security feeds have flagged the domain. Google Safe Browsing classifies it as a social‑engineering threat and labels the scam type as a crypto scam.

It appears on one external blocklist and is listed by PhishDestroy. VirusTotal analysis shows that 14 out of 93 scanning engines have generated a detection for the domain, reinforcing the malicious assessment. The Gridinsoft trust score of 0/100 further indicates a lack of trustworthiness. The page title and the “Impersonates: Uniswap” tag demonstrate an attempt to masquerade as the legitimate Uniswap service.

The available evidence does not disclose the exact payload or phishing landing page content, as the site is presently offline and no visual capture is provided. Consequently, the full scope of the impersonation technique (e.g., credential harvesting, wallet address substitution) remains unknown. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑activation, and add the IP address 172.67.191.35 to threat‑intel feeds. Users should be warned that any unsolicited communication referencing src‑uniswap.org is likely malicious, and legitimate Uniswap interactions never occur through this domain.