uniiswap[.]pages[.]dev

PhishDestroy has identified uniiswap.pages.dev as a brand impersonation phishing domain targeting Uniswap users. This threat is classified as a crypto drainer designed to steal wallet credentials and digital assets by mimicking the legitimate Uniswap interface. The site's title, 'Suspected phishing site | Cloudflare,' indicates that Cloudflare has already flagged it as malicious, yet it remains active and accessible.

Technical indicators paint a clear picture of risk. VirusTotal reports 9 out of 95 security vendors flagging this domain as malicious. The domain was registered through Cloudflare, Inc. on October 11, 2025, and resolves to the IPv6 address 2606:4700:310c::ac42:2c87. Google Safe Browsing explicitly flags it as phishing. It appears on one security blocklist, and no SSL certificate is present—a strong red flag for any site handling sensitive financial transactions.

As of this report, the domain remains active with an elevated risk level. While Cloudflare has displayed a warning page, the domain itself is still operational and could be used to deceive users. PhishDestroy recommends that all users avoid interacting with uniiswap.pages.dev, never connect a crypto wallet or enter private keys, and always verify the authenticity of Uniswap-related domains through official channels. Remaining vigilant is crucial to prevent asset loss.