unlswap[.]org-dapp-network[.]com

Analysis indicates that the domain unlswap.org-dapp-network.com was registered on 21 February 2026 through GMO Internet Group, Inc. d/b/a Onamae.com. The domain resolves to IP address 172.67.140.22, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No SSL certificate is presented for the host, and an HTTP request returns a 302 redirect followed by a page whose title is “403 Forbidden”, indicating that the site is intentionally blocking direct access while maintaining the redirect behavior. The Gridinsoft trust score for the domain is 0 out of 100, reflecting an extremely low reputation.

VirusTotal reports that four of ninety‑three scanning engines flag the domain as malicious, and the domain appears on two public blocklists, specifically PhishDestroy and ScamSniffer. The nameservers listed are ns1.verification-hold.suspended-domain.com and ns2.verification-hold.suspended-domain.com, suggesting use of a verification‑hold service often associated with abandoned or quickly‑registered domains. The domain is classified as a crypto‑related scam that impersonates the Uniswap brand, confirming a brand‑impersonation threat vector. The combination of a fresh registration, Cloudflare hosting, lack of TLS, low trust score, multiple vendor detections, and inclusion on blocklists indicates a high‑risk infrastructure that is currently active.

Defenders should block the domain at network perimeter, monitor DNS queries for the associated IP and nameservers, and add the domain to internal threat intelligence feeds. Continuous re‑scanning with VirusTotal and other sandbox services is recommended to capture any payload changes. Because the site returns a 403 page title, automated content retrieval may be limited, but the observed indicators are sufficient to justify preventive controls.