qianbaouniswap[.]cam

The domain qianbaouniswap.cam has been identified as a high-risk brand impersonation threat targeting Uniswap, a decentralized cryptocurrency exchange platform. Analysis confirms the domain was actively used for crypto drainer operations, designed to deceive users into connecting wallets and authorizing fraudulent transactions. As of the latest assessment, the domain has been taken offline, though residual risk may persist through cached or mirrored instances. Infrastructure analysis reveals the domain was registered through Dynadot LLC on May 26, 2026, and resolved to the IP address 154.216.118.251. It appears on four security blocklists, including MetaMask, PhishDestroy, SEAL, and InversionDNS. Google Safe Browsing classifies the domain under the SOCIAL_ENGINEERING category. VirusTotal reports indicate that 16 out of 95 security vendors flagged the domain as malicious, with detection patterns consistent with crypto-related fraud. The page title, qianbaouniswap.cam, further corroborates the impersonation attempt, as it mimics legitimate Uniswap branding while introducing subtle obfuscation. Current status indicates the domain is offline, reducing immediate exposure. However, threat actors frequently repurpose infrastructure, and similar domains may emerge. Organizations and users are advised to block the domain and associated IP at the network perimeter. Wallet providers should monitor for transaction requests originating from this domain or its resolved IP. End users should verify domain authenticity before interacting with any cryptocurrency platform and enable transaction simulation tools to preview wallet interactions. Security teams are encouraged to correlate this domain with other Uniswap-themed impersonation campaigns to identify broader patterns.