unviswaip[.]cc

Analysis of unviswaip.cc indicates a high‑risk brand‑impersonation campaign targeting Uniswap. The domain was registered on February 21, 2026 through NiceNIC International Group Co., Limited and resolves to IP 104.21.64.1, which belongs to Cloudflare (AS13335) in the United States. Infrastructure inspection shows the domain is served via Cloudflare’s edge network, employing HTTP/3 and presenting a Google Trust Services / WE1 SSL certificate. The observed page title reads "unviswaip.cc | 521: Web server is down" and the HTTP response code is 521, suggesting the origin server is currently unavailable. The domain appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal scans report that 10 of 93 security vendors flagged the domain as malicious, while Gridinsoft assigns a trust score of 0 / 100. Nameservers are decker.ns.cloudflare.com and jacqueline.ns.cloudflare.com. The campaign’s status remains active, and the risk level is high. Defenders should block outbound connections to 104.21.64.1, add unviswaip.cc to URL filtering policies, and monitor for any credential or token submissions associated with Uniswap‑related traffic. Further investigation is required to determine the exact payload or phishing page content, as the current HTTP 521 response provides limited visibility into the malicious landing page.