ip-84-32-32-6[.]005[.]ptr[.]cherryservers[.]net

This domain, ip-84-32-32-6.005.ptr.cherryservers.net, is actively flagged as a high-risk brand impersonation targeting Uniswap, a decentralized finance platform. Registered on March 4, 2026, through an entity associated with Kaunas University of Technology, the domain resolves to IP 84.32.32.6 (AS204770, UAB Cherry Servers, US) and currently returns an HTTP 200 status. The page title, 'Uniswap Interface,' aligns with the identified scam type: an airdrop phishing kit designed to deceive users into interacting with fraudulent smart contracts or disclosing credentials. Infrastructure analysis reveals the domain is hosted on a provider known for bulletproof services, with nameservers configured under Azure DNS (ns1-08.azure-dns.com, ns2-08.azure-dns.net, ns3-08.azure-dns.org, ns4-08.azure-dns.org). The absence of an SSL certificate is a notable red flag, as legitimate financial interfaces typically enforce HTTPS. Security vendors have detected malicious activity, with 4 of 95 engines flagging the domain on VirusTotal. It appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and holds a Gridinsoft trust score of 0/100, indicating confirmed malicious behavior. Defenders should prioritize blocking this domain at the DNS and IP level, particularly for endpoints accessing decentralized finance platforms. The use of Azure DNS nameservers suggests potential abuse of cloud infrastructure, warranting further investigation into related domains or IPs under the same configuration. Given the domain's recent registration and active status, monitoring for similar patterns—such as newly created domains impersonating Uniswap or other DeFi brands—is recommended. No evidence suggests compromise of legitimate Uniswap infrastructure, but users should be alerted to verify URLs and avoid interacting with unsecured (HTTP-only) interfaces.