eth-uniswap[.]web[.]app

PhishDestroy has identified eth-uniswap.web.app as a high-risk phishing domain that impersonates the Uniswap brand. This site is designed to trick users into believing they are on a legitimate Uniswap interface, but in reality it aims to steal login credentials, private keys, or other sensitive information. The page title displayed is 'Google', a common tactic to evade detection and appear innocuous in browser tabs or search results. This threat is particularly dangerous because it uses Google Firebase hosting, which can lend a false sense of legitimacy.

Our analysis is backed by concrete data: VirusTotal reports that 1 out of 95 security vendors flag this domain as malicious, and it appears on one security blocklist. The domain is still active and resolves to IP address 142.251.179.106. It was registered through Google Firebase, a popular hosting service, which attackers abuse to create convincing phishing pages. The domain name 'eth-uniswap.web.app' directly references both Ethereum and Uniswap, making it highly targeted at cryptocurrency users.

If you have visited this domain, do not enter any information. Immediately change your Uniswap passwords and any other accounts that share the same credentials. Enable two-factor authentication wherever possible and monitor your accounts for suspicious activity. Consider running a security scan on your device to check for malware. Report the domain to Google Safe Browsing and Uniswap's security team. Stay vigilant and always verify URLs before interacting with cryptocurrency platforms.