uniswapgroup[.]limited

The domain uniswapgroup.limited was registered on February 21, 2026 and is currently taken offline. Infrastructure analysis shows the domain resolves to the Cloudflare address 172.67.174.67, hosted within AS13335 (Cloudflare, Inc.) in the United States. The site is served behind Cloudflare, employing HTTP/3 and presenting a Google Trust Services / WE1 SSL certificate, indicating a properly issued TLS chain but offering no assurance of benign intent. DNS configuration lists the authoritative nameservers darwin.ns.cloudflare.com and mallory.ns.cloudflare.com, both standard Cloudflare resolver endpoints.

The registrar record lists Atak Domain Bilgi Teknolojileri A.Ş. as the sponsoring registrar. The page title returned from the now‑inactive host is "Bitwarder | Bitwarder Giriş | Your One- Stop Design Solution | Bitwarder", which bears no direct reference to the targeted brand, yet the intelligence tags the domain as a brand‑impersonation attempt against Uniswap, classified as a crypto‑related scam. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy.

VirusTotal scans show two of ninety‑three security vendors flagging the domain, providing additional corroboration of malicious intent. While the active content of the site has not been captured, the combination of a brand‑targeted classification, crypto‑scam labeling, and multiple independent detections suggests a high likelihood of fraudulent activity aimed at deceiving Uniswap users. Defenders should continue to block the domain at network and endpoint layers, monitor DNS queries for the associated Cloudflare IP range, and update threat‑intel feeds with the observed indicators of compromise. Additional verification of the site’s payload, if it reappears, would be required to fully characterize the phishing kit or credential‑harvesting mechanisms employed.