uniswpl[.]cc

The domain uniswpl.cc was registered on 21 February 2026 and is presently taken offline. DNS resolution points to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The TLS certificate presented by the host is the Cloudflare TLS Issuing ECC CA 3 certificate, indicating that the site was served behind Cloudflare’s edge network. VirusTotal reports that 15 out of 93 scanned security vendors flagged the domain as malicious, confirming a consensus of detection across multiple anti‑malware engines.

AlienVault OTX lists the domain in fourteen separate threat‑intel pulses, reinforcing its association with malicious campaigns. The domain is currently listed on two public security blocklists and has been actively blocked by the PhishDestroy and ScamSniffer filtering services. The campaign is categorized as a brand‑impersonation operation targeting the Uniswap brand, as indicated by the supplied intelligence. No additional metadata such as page title, content snapshots, or Safe Browsing verdicts are available, so the exact lure mechanisms remain unverified.

Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑hosting attempts that reuse the same IP or Cloudflare configuration, and add the domain to internal indicator‑of‑compromise (IOC) lists. Ongoing correlation with the 14 OTX pulses may reveal related infrastructure or future variants. Because the site is offline, active probing is not possible, but the documented infrastructure and vendor detections justify a high‑confidence classification of the domain as a malicious Uniswap impersonation asset.