uniswap[.]org-app-web3[.]com

The domain uniswap.org-app-web3.com is currently active and hosts a crypto‑scam page that returns a 403 Forbidden title. The site is registered through GMO Internet Group, Inc. d/b/a Onamae.com and was created on February 21, 2026. DNS resolution points to the IP address 104.21.32.1, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No SSL certificate is presented, and the HTTP response code observed is a 302 redirect, indicating that the server attempts to forward visitors before delivering the forbidden page.

The domain is served by the nameservers ns1.verification-hold.suspended-domain.com and ns2.verification-hold.suspended- (truncated in the source data). Gridinsoft assigns a trust score of 0 out of 100, reflecting a complete lack of reputation. Detection engines have flagged the domain: seven of ninety‑three VirusTotal scanners mark it as malicious, and it appears on two external blocklists. Independent anti‑phishing services PhishDestroy and ScamSniffer have listed the domain as blocked.

The site explicitly impersonates the Uniswap brand, aligning with the reported crypto‑scam classification. While the page content beyond the title has not been publicly disclosed, the combination of a fresh registration, Cloudflare hosting, absent TLS, low trust score, and multiple vendor detections suggests a high‑risk infrastructure. Defenders should add the domain to URL filtering and DNS block policies, monitor outbound connections to the associated IP, and ensure that any user‑initiated requests to uniswap.org‑app‑web3.com are denied. Continuous re‑evaluation is advised, as additional indicators such as payload analysis or credential harvesting techniques may emerge as the campaign evolves.