v2-uniswap[.]webflow[.]io

Analysis of the domain v2-uniswap.webflow.io confirms it as a high-risk crypto scam impersonating Uniswap, a leading decentralized exchange. The domain, registered on March 23, 2026, through Webflow, was flagged by 16 of 94 security vendors on VirusTotal and appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. Google Safe Browsing classified the site as engaging in social engineering, a common tactic in crypto-related fraud. The page title, 'Uniswap - Trade Crypto on DeFI's Leading Exchange,' explicitly mimics Uniswap's branding, reinforcing the impersonation threat.

Infrastructure analysis reveals the domain resolves to IP 172.64.151.8, hosted by Cloudflare in Canada, and employs HTTP/3 and Cloudflare technologies. The SSL certificate is issued by Google Trust Services, a legitimate provider often exploited in phishing campaigns to appear trustworthy. Despite these technical indicators, the domain is currently offline, returning an HTTP 404 status, which may indicate takedown efforts or temporary suspension by the hosting provider. Defenders should treat this domain as confirmed malicious, particularly for crypto-related fraud.

The combination of brand impersonation, security vendor detections, and social engineering flags provides strong evidence of its fraudulent intent. Organizations should ensure blocklisting at the network and endpoint levels, monitor for related domains, and educate users on recognizing crypto scams. While the exact content of the site remains unanalyzed, the available indicators align with known patterns of crypto phishing and brand abuse.