uniswap[.]org-api-v2-connect[.]com

The domain uniswap.org-api-v2-connect.com is classified as a brand impersonation threat targeting the decentralized finance (DeFi) platform Uniswap. No drainer kit has been identified, but the domain is designed to appear legitimate, potentially tricking users into divulging sensitive information or performing unauthorized transactions.

Technical analysis reveals that the domain has been flagged by 2 out of 95 security vendors on VirusTotal, indicating a low level of detection by automated systems. The domain is registered through MAT BAO CORPORATION and resolves to the IP address 104.21.32.75. It was created on February 21, 2026, and the SSL certificate is issued by Google Trust Services / WE1. The domain appears on 2 security blocklists, suggesting it has been involved in malicious activities.

As of the latest assessment, the domain is currently offline. The presence of a 401 Authorization Required page title suggests that the domain was actively attempting to authenticate users, a common tactic in phishing attacks. Despite the domain being taken offline, there remains a risk that it could be reactivated. Security teams are advised to monitor the domain for any signs of re-emergence and to educate users about the dangers of impersonation attacks targeting well-known brands like Uniswap.