kingpro-uniswap-wallet[.]co[.]com

On July 24, 2026, the domain kingpro-uniswap-wallet.co.com was assessed as an elevated‑risk brand‑impersonation infrastructure targeting Uniswap users. The site is currently offline, but historical records show it resolved to the IP address 188.114.97.3, which belongs to the Cloudflare network (AS13335) located in the United States. The domain was registered on 16 August 1997 through Moniker Online Services LLC, and it uses the four standard nic.co.com nameservers (ns1‑ns4.nic.co.com). No TLS certificate was observed, indicating that the service was delivered over plain HTTP when active.

Content analysis from the cached page title “Referral Program | Uniswap Wallet” aligns with the declared scam type of a crypto‑scam, specifically an impersonation of the Uniswap brand. Google Safe Browsing classifies the domain under the “social engineering” category, and the Gridinsoft trust score assigns a rating of 0 out of 100, reflecting extreme untrustworthiness. VirusTotal scans returned seven positive detections out of ninety‑five vendors, reinforcing the malicious assessment.

The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service. Given the combination of a reputable hosting provider being abused, the lack of encryption, and multiple independent detections, defenders should continue to deny any traffic to the domain, monitor for any resurrection of the host or repurposing of the IP address, and add the domain to internal blocklists. Threat‑intel teams should also watch for related variations that reuse the “kingpro‑uniswap‑wallet” naming pattern, as the attacker may attempt new campaigns leveraging the same brand‑impersonation technique.