uniswap-viewers[.]web[.]app

The domain uniswap-viewers.web.app is currently active and classified as a high‑risk brand‑impersonation campaign targeting Uniswap. Infrastructure analysis shows the domain resolves to IP address 104.21.31.170, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site presents a valid SSL certificate issued by Google Trust Services (WR4) and is registered through Google LLC, indicating the use of a reputable registrar to increase perceived legitimacy. A HTTP request returns status 200 and the page title is "Uniswap | Portfolio Tracker," matching the advertised brand target. VirusTotal reports a single detection out of 95 security vendors, and the domain appears on one public blocklist, currently blocked by PhishDestroy. Independent scoring from Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. While the exact page content beyond the title has not been disclosed, the combination of a brand‑specific title, a crypto‑scam classification, and the presence of a valid TLS certificate suggests a deliberate attempt to lure Uniswap users into a fraudulent portfolio‑tracking interface. Defenders should immediately block the domain at network perimeters, update internal threat feeds with the observed indicators (domain, IP, SSL fingerprint, and detection count), and monitor for related activity leveraging the same Cloudflare edge. End‑users should be warned not to enter credentials or interact with any services hosted on this domain, and any compromised accounts should be secured promptly.