uniswap[.]trustline[.]id

The domain uniswap.trustline.id was registered on 25 March 2026 through PT Jagat Informasi Solusi (Indonesia) and is currently classified as a high‑risk brand‑impersonation site targeting Uniswap. The domain’s risk level is marked high, its status active, and it presents a page titled “Trustline”, a clear attempt to masquerade as a legitimate DEX service.

Infrastructure analysis shows the domain resolves to IP address 199.36.158.100, which is hosted in the United States and owned by Google LLC. The name servers are ns43.domaincontrol.com and ns44.domaincontrol.com, both typical of common registrar services. The site serves content over HTTPS using a Google Trust Services / WR3 certificate, and an HTTP request returns status 200, indicating a functional web server.

Detection data indicates that eight of ninety‑five VirusTotal security vendors have flagged the domain as malicious, and the site appears on three independent blocklists. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. Additionally, the domain is blocked by three known anti‑phishing solutions, demonstrating that multiple defensive platforms already recognize the threat.

Analysis suggests the primary intent is to lure users into a counterfeit decentralized exchange workflow, potentially harvesting private keys or facilitating fraudulent token swaps. While the page title “Trustline” provides a superficial veneer of legitimacy, no further infrastructure such as a backend wallet service or blockchain addresses have been observed publicly. Defenders should block the domain at DNS and network layers, monitor outbound connections to 199.36.158.100, and ensure that users are warned about unsolicited Uniswap‑related URLs. Ongoing surveillance is recommended to detect any evolution of the site’s content or additional infrastructure components.