uniswapwnl[.]pages[.]dev

PhishDestroy identifies uniswapwnl.pages.dev as a confirmed brand impersonation threat targeting Uniswap users. This domain is currently active and poses an elevated risk to visitors through deceptive replication of the legitimate Uniswap brand. The fraudulent page leverages Cloudflare’s infrastructure to appear legitimate while attempting to harvest credentials or cryptocurrency assets.

This domain was flagged by 1 of 95 VirusTotal security vendors, indicating limited but confirmed malicious intent. It is registered through Cloudflare, Inc., resolves to IP address 172.66.46.226, and holds an SSL certificate issued by Google Trust Services. These technical indicators suggest the threat actor is using reputable infrastructure to enhance credibility while distributing a fraudulent replica of the Uniswap platform.

The current status of uniswapwnl.pages.dev remains active, with no signs of takedown as of the latest scan. Users are strongly advised to avoid this domain entirely and verify all links to Uniswap services through official channels such as app.uniswap.org. If accidental exposure occurs, disconnect from the internet, scan for malware, and report the domain to Uniswap’s official security team and local cybercrime units. Exercise extreme caution with any unsolicited links referencing Uniswap, especially those hosted on pages.dev or similar free hosting platforms.