uniswap-lab[.]xyz

This domain, uniswap-lab.xyz, is identified as a high-risk brand impersonation threat specifically targeting Uniswap, a major decentralized finance platform. Analysis indicates the site was designed to deceive users into believing they were interacting with legitimate Uniswap services, likely for the purpose of crypto asset theft or credential harvesting. The infrastructure exhibits no direct evidence of a crypto drainer kit, but the combination of brand mimicry and social engineering tactics aligns with known attack patterns in the decentralized finance sector. Technical indicators reveal multiple red flags. The domain is flagged by 15 out of 95 security vendors on VirusTotal, with Google Safe Browsing specifically marking it as SOCIAL_ENGINEERING. It was registered through HOSTINGER operations, UAB, and resolves to the IP address 88.222.222.68. The domain was created on May 03, 2026, an anomalous future date suggesting potential registry manipulation or data obfuscation. It appears on four security blocklists and is actively blocked by multiple wallet security providers, including MetaMask and PhishDestroy. Detected technologies include React, Hostinger CDN, and HTTP/3, which are consistent with modern phishing infrastructure. As of the latest assessment, uniswap-lab.xyz has been taken offline, likely in response to security vendor reports and blocklist inclusion. However, the domain remains a residual risk due to potential re-registration or migration to alternative hosting. Users who interacted with this domain should immediately revoke any connected wallet permissions, rotate credentials, and monitor accounts for unauthorized transactions. Organizations are advised to maintain blocklist updates and educate users on verifying domain authenticity before engaging with decentralized finance platforms.