unlswap[.]org-app-defi[.]com

The domain unlswap.org-app-defi.com was registered on February 21, 2026 through GMO Internet Group, Inc. d/b/a Onamae.com. The zone is delegated to the nameservers ns1.verification-hold.suspended-domain.com and ns2.verification-hold.suspended- (truncated), indicating a likely placeholder or compromised hosting configuration. DNS resolution returns the IPv6 address 2606:4700:3030::6815:7001, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. No TLS certificate is presented, causing HTTPS connections to fail or be downgraded to HTTP. The HTTP response delivers a page titled “Access Denied”, which does not reveal any further content.

The site is classified as a brand‑impersonation and crypto‑scam targeting the Uniswap brand. It appears on two independent security blocklists and is explicitly blocked by PhishDestroy and ScamSniffer. On VirusTotal the domain received detections from ten of ninety‑five scanning engines, reinforcing the malicious assessment. Gridinsoft assigns a trust score of zero out of one hundred, indicating the lowest possible confidence in legitimacy. The overall risk rating is high and the operational status remains active as of the report date, July 24, 2026.

Defenders should add the IPv6 address and the fully qualified domain name to network‑level deny lists, enforce TLS verification failures, and monitor Cloudflare‑origin traffic for unusual patterns. Because the domain lacks a certificate and serves only an “Access Denied” page, any attempt to retrieve content over HTTPS will be blocked by browsers, but the underlying infrastructure can still be leveraged for phishing or redirection. Continuous re‑scanning with VirusTotal or similar aggregators is recommended to capture any new detections. Organizations that rely on Uniswap services should educate users about the impersonation risk and instruct them to verify the correct domain before entering credentials or wallet information.