Uniswap

Crypto & web3 United Statesuniswap.orgRank 85 of the most impersonated
Cert findings · 24 h
1
Cert findings · 7 days
17
11 reported or listed · 5 on phishing hosts · 1 on Spamhaus DROP
Registered lookalikes
133
43 listed by a source or an address list
Official domains
3
verified from Uniswap's own sites and records

Certificate findings for Uniswap

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Uniswap's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 24 findings, grouped by hostname

  1. www.eu-uniswap.net DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ListedParking page · ParkingCrew (Team Internet)Under eu-uniswap.net, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 16 d ago
    DetailsHide
    Hostname
    www.eu-uniswap.net
    First seen
    2026-11-05 02:10 UTC
    First published
    2026-11-05 02:59 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 03:11 UTC
    Listed
    MetaMask, listing eu-uniswap.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-05 01:07 UTC to 2027-02-03 01:07 UTC
    Logged 2026-11-05 02:06 UTC in Let's Encrypt Willow2027h1, entry 942,317,459
    SHA-256 040ae9a9efb91c0fbfab849d74dab9e13b65952024fd622705fdbb3ea446ac01
    Public key SHA-256 d83b5bf20df0c62d53400e306157393f59dcd3cccdf1512e52902af55de5fd87
    Brand
    Uniswap
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    eu-uniswap.net
    Registered
    2026-10-20 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:33 UTC

    Suggest a correction

  2. uniswap.vision DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…5 addresses
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    uniswap.vision
    First seen
    2026-11-04 00:21 UTC
    First published
    2026-11-04 00:32 UTC
    DNS
    Resolves · checked 2026-11-05 00:46 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.78.156.59.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 5.78.156.59
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-03 23:16 UTC to 2027-02-01 23:16 UTC
    Logged 2026-11-04 00:15 UTC in Let's Encrypt Willow2027h1, entry 922,767,830
    SHA-256 71de3f8c1a51c8a1bb56eac110611745f3ebd833d2ae06a0b55ee26d9cc6bb71
    Public key SHA-256 0f0f32a7193bb1bcd042cff0eaf169ebf53383a19b4d386accedcb873b978481
    Brand
    Uniswap
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
    Domain
    uniswap.vision
    Registered
    2026-07-07 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:33 UTC

    Suggest a correction

  3. eu-uniswap.net DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ListedParking page · ParkingCrew (Team Internet)Listed by MetaMaskMX absentSPF missingDMARC missingRegistered 16 d ago
    DetailsHide
    Hostname
    eu-uniswap.net
    First seen
    2026-11-03 23:41 UTC
    First published
    2026-11-04 00:32 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:45 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-03 22:42 UTC to 2027-02-01 22:42 UTC
    Logged 2026-11-03 23:40 UTC in IPng Networks Gouda2027h1, entry 308,037,251
    SHA-256 8487968964c36b458eb65c06a0556b0a74750c206599cd02a107618d4b00bb03
    Public key SHA-256 d83b5bf20df0c62d53400e306157393f59dcd3cccdf1512e52902af55de5fd87
    Brand
    Uniswap
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    eu-uniswap.net
    Registered
    2026-10-20 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 00:33 UTC

    Suggest a correction

  4. uniswap-view.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    uniswap-view.pages.dev
    First seen
    2026-11-01 11:15 UTC
    First published
    2026-11-01 11:35 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 11:40 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-01 00:00 UTC to 2027-01-25 21:40 UTC
    Logged 2026-11-01 11:10 UTC in IPng Networks Halloumi2027h1, entry 329,151,949
    SHA-256 62de259c15b642fbfcaf00e67db10b64c95e29893d0ad63cd555bf3ace9939c9
    Public key SHA-256 b6838ce0c4b99d5e93ccdecda56492b1afea538aa74b45ffb7a48a37aa13464a
    Brand
    Uniswap
    Addresses
    172.66.44.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c55
    2606:4700:310c::ac42:2fab
    Cloudflare
    Cloudflare (172.66.44.85, 172.66.47.171): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  5. app-uniswap.to US · AS6461 · Zayo Bandwidth
    ReportedPhishing hostSpamhaus DROPReported by PhishDestroy · Address hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 9 mo ago
    DetailsHide
    Hostname
    app-uniswap.to
    First seen
    2026-10-31 22:00 UTC
    First published
    2026-10-31 22:45 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 22:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 178.16.52.122.
    1. Phishing-host list fetched with the address
    2. Resolved to 178.16.52.122
    3. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 178.16.52.122.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 178.16.52.122
    3. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-10-31 21:49 UTC to 2027-01-27 14:01 UTC
    Logged 2026-10-31 21:59 UTC in DigiCert Sphinx2027h1, entry 324,981,109
    SHA-256 4ba9f9871af8998b07096dfeadc76adcf35d61022fb6a9b39b1dd2a4bdf06c35
    Public key SHA-256 efde3f8977e07798aef95e370eefbe457679fb2a9f6226d19dc909d92ab2ffb3
    PhishDestroy
    Brand
    Uniswap
    Addresses
    178.16.52.122 · United States · AS6461 ZAYO-6461 - Zayo Bandwidth
    Domain
    app-uniswap.to
    Registered
    2026-01-28 · Tonic
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

  6. uniswap.fr DE · AS24940 · HETZNER-AS Hetzner Online G…2 addresses
    ListedHetznerListed by MetaMaskMX presentSPF -allDMARC rejectRegistered 5 mo ago
    DetailsHide
    Hostname
    uniswap.fr
    First seen
    2026-10-30 20:21 UTC
    First published
    2026-10-30 20:43 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 20:47 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-30 19:17 UTC to 2027-01-28 19:17 UTC
    Logged 2026-10-30 20:16 UTC in IPng Networks Halloumi2027h1, entry 315,434,585
    SHA-256 15e31281ddde76d4b8a145deaaa84a357b6684cd47d397621dc4647480c7cb0a
    Public key SHA-256 9f79a3852555e993f9e0ac30834203115d4cbf6e34eb29cbeafa8ce47aa98490
    Brand
    Uniswap
    Addresses
    195.201.235.173 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    2a01:4f8:c013:fb43::1
    Hetzner
    Hetzner (195.201.235.173): a cloud provider. It rents servers and addresses to its customers.
    Domain
    uniswap.fr
    Registered
    2026-06-23 · XNS Registrar B.V.
    MX
    Receives mail at mx186.m2bp.com, mx186.mb1p.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  7. www.uniswap.fr DE · AS24940 · HETZNER-AS Hetzner Online G…2 addresses
    ListedHetznerUnder uniswap.fr, listed by MetaMaskMX presentSPF -allDMARC rejectRegistered 5 mo ago
    DetailsHide
    Hostname
    www.uniswap.fr
    First seen
    2026-10-30 20:21 UTC
    First published
    2026-10-30 20:43 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 20:47 UTC
    Listed
    MetaMask, listing uniswap.fr and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-30 19:17 UTC to 2027-01-28 19:17 UTC
    Logged 2026-10-30 20:16 UTC in IPng Networks Halloumi2027h1, entry 315,434,382
    SHA-256 545a2bdfa1dd7a5eefe693dabb1ea511e687342adb9b53347814abb6563b2560
    Public key SHA-256 0ff1e4c61a0d26b366f403111add715ddace6ee3063f341fad84a2b558a5f0e6
    Brand
    Uniswap
    Addresses
    195.201.235.173 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    2a01:4f8:c013:fb43::1
    Hetzner
    Hetzner (195.201.235.173): a cloud provider. It rents servers and addresses to its customers.
    Domain
    uniswap.fr
    Registered
    2026-06-23 · XNS Registrar B.V.
    MX
    Receives mail at mx186.m2bp.com, mx186.mb1p.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  8. uniswap-ranking.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    uniswap-ranking.pages.dev
    First seen
    2026-10-30 18:51 UTC
    First published
    2026-10-30 19:10 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 19:15 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-30 17:46 UTC to 2027-01-28 18:44 UTC
    Logged 2026-10-30 18:46 UTC in Google PlumbersArms2027h1, entry 527,671,728
    SHA-256 88a3a70a7f433e8a9b77cba5551bb255ab15f3ff073926b4f0286deea9215cc1
    Public key SHA-256 9b0a8a335c9acac409015ca3e75d1a94a6aae8ad3663a3a1448c22c390d0a786
    Brand
    Uniswap
    Addresses
    172.66.44.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2c57
    2606:4700:310c::ac42:2fa9
    Cloudflare
    Cloudflare (172.66.44.87, 172.66.47.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  9. uniswap-v2.to GE · AS200823 · MHost-AS MHost LLC2 addresses
    ListedPhishing hostListed by MetaMask · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    uniswap-v2.to
    First seen
    2026-10-30 17:45 UTC
    First published
    2026-10-30 18:07 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:14 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.252.155.27.
    1. Resolved to 5.252.155.27
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-30 16:42 UTC to 2027-01-28 16:42 UTC
    Logged 2026-10-30 17:41 UTC in IPng Networks Halloumi2027h1, entry 314,471,876
    SHA-256 96cf9294cfb488d6109d7b78cb1dbd44456165c2ad3d49ae83e889813ac4be37
    Public key SHA-256 cce0aee93ab204095ea0bf212f0dfc22bdf833a03b76dbd658d5400016283466
    Brand
    Uniswap
    Addresses
    5.252.155.27 · Georgia · AS200823 MHost-AS MHost LLC
    192.142.10.83 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    uniswap-v2.to
    Registered
    2026-09-06 · Tonic
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  10. uniswap-test-m0dal.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    uniswap-test-m0dal.com
    First seen
    2026-10-30 14:41 UTC
    First published
    2026-10-30 14:56 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 15:03 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-30 13:39 UTC to 2027-01-28 14:37 UTC
    Logged 2026-10-30 14:39 UTC in Google ParcelYard2027h1, entry 523,985,270
    SHA-256 8f7a3002acf670b661898855c1ae2728955d2b8548795eadcb4ec32197a43442
    Public key SHA-256 7fbb8fd2242b44fc8aa113a740a9386803e2188f35f720c83acafd91112f3c37
    Brand
    Uniswap
    Addresses
    104.21.85.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:558f
    2606:4700:3033::ac43:cea8
    Cloudflare
    Cloudflare (104.21.85.143, 172.67.206.168): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    uniswap-test-m0dal.com
    Registered
    2026-09-01 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:01 UTC

    Suggest a correction

  11. uniswap-foundation.limited US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    uniswap-foundation.limited
    First seen
    2026-10-30 11:26 UTC
    First published
    2026-10-30 11:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 11:51 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-30 10:24 UTC to 2027-01-28 11:22 UTC
    Logged 2026-10-30 11:24 UTC in Geomys Tuscolo2027h1, entry 406,820,447
    SHA-256 4b22eaaea09e6c71ad40fcd063c4964480b50bdfa405ca3ced14e6ce1282b6d9
    Public key SHA-256 4006ce21e67f280265387f682dac50cc952ea313d4c162295ded95492608bb3e
    PhishDestroy
    Brand
    Uniswap
    Addresses
    104.21.63.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.147.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:3f9a
    2606:4700:3033::ac43:9324
    Cloudflare
    Cloudflare (104.21.63.154, 172.67.147.36): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    uniswap-foundation.limited
    Registered
    2025-11-09 · Atak Domain Bilgi Teknolojileri A.Ş.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  12. portfolio-uniswap.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    portfolio-uniswap.pages.dev
    First seen
    2026-10-29 23:26 UTC
    First published
    2026-10-29 23:44 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 23:53 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-29 22:20 UTC to 2027-01-27 23:19 UTC
    Logged 2026-10-29 23:20 UTC in DigiCert Wyvern2027h1, entry 353,356,657
    SHA-256 dc04376de79d2a4e3f55df8dbc22e64b13e93f494bd5426d1c7b0eb977ea9ab3
    Public key SHA-256 c74295f4e7ff3912597500a92f61b1b439eb7d269c4b09426745185949be5173
    Brand
    Uniswap
    Addresses
    172.66.44.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cce
    2606:4700:310c::ac42:2f32
    Cloudflare
    Cloudflare (172.66.44.206, 172.66.47.50): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  13. www.uniswap.cz CZ · AS15685 · CASABLANCA-AS CASABLANCA IN…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF all omittedDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    www.uniswap.cz
    First seen
    2026-10-29 03:10 UTC
    First published
    2026-10-29 03:36 UTC
    DNS
    Resolves · checked 2026-11-05 03:42 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.78.104.3.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.78.104.3
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-29 02:10 UTC to 2027-01-27 02:10 UTC
    Logged 2026-10-29 03:08 UTC in IPng Networks Halloumi2027h1, entry 296,112,377
    SHA-256 244f1092df0cb55c946e14ef9fa87bb4b068ffe3631d4307f054be661e574de5
    Public key SHA-256 595915b0b15dd7d81371b5a4c43981dd0c94402bf3decd6a0f78a419d033958d
    Brand
    Uniswap
    Addresses
    77.78.104.3 · Czechia · AS15685 CASABLANCA-AS CASABLANCA INT a.s.
    Domain
    uniswap.cz
    Registered
    2020-08-13 · Gransy s.r.o.
    MX
    Receives mail at mail.uniswap.cz
    SPF
    SPF record without an "all" mechanism
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:44 UTC

    Suggest a correction

  14. uniswap.cz CZ · AS15685 · CASABLANCA-AS CASABLANCA IN…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF all omittedDMARC missingRegistered 6 y ago
    DetailsHide
    Hostname
    uniswap.cz
    First seen
    2026-10-29 03:10 UTC
    First published
    2026-10-29 03:36 UTC
    DNS
    Resolves · checked 2026-11-05 03:42 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.78.104.3.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.78.104.3
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-29 02:10 UTC to 2027-01-27 02:10 UTC
    Logged 2026-10-29 03:08 UTC in IPng Networks Halloumi2027h1, entry 296,112,377
    SHA-256 244f1092df0cb55c946e14ef9fa87bb4b068ffe3631d4307f054be661e574de5
    Public key SHA-256 595915b0b15dd7d81371b5a4c43981dd0c94402bf3decd6a0f78a419d033958d
    Brand
    Uniswap
    Addresses
    77.78.104.3 · Czechia · AS15685 CASABLANCA-AS CASABLANCA INT a.s.
    Domain
    uniswap.cz
    Registered
    2020-08-13 · Gransy s.r.o.
    MX
    Receives mail at mail.uniswap.cz
    SPF
    SPF record without an "all" mechanism
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:44 UTC

    Suggest a correction

  15. uniswap-views.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    uniswap-views.pages.dev
    First seen
    2026-10-28 21:31 UTC
    First published
    2026-10-28 22:27 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 22:41 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-28 20:27 UTC to 2027-01-26 21:26 UTC
    Logged 2026-10-28 21:27 UTC in DigiCert Wyvern2027h1, entry 339,224,195
    SHA-256 6a8695349bff83d2be1af53a6d7a8585c6ffc16a09caf3ac2b215e25033da902
    Public key SHA-256 6d069789856236893824c435ac30ec4d0b56d74ef137b278b28f9f8df0ece582
    Brand
    Uniswap
    Addresses
    172.66.44.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cc4
    2606:4700:310c::ac42:2f3c
    Cloudflare
    Cloudflare (172.66.44.196, 172.66.47.60): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  16. www.uniswap-app.to SC · AS206264 · AMARUTU-TECHNOLOGY Amarutu …
    ReportedPhishing hostUnder uniswap-app.to, reported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    www.uniswap-app.to
    First seen
    2026-10-27 22:52 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:00 UTC
    Reported
    PhishDestroy, listing uniswap-app.to and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 31.220.1.30.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 31.220.1.30
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-27 21:50 UTC to 2027-01-25 21:50 UTC
    Logged 2026-10-27 22:49 UTC in Google PlumbersArms2027h1, entry 479,457,022
    SHA-256 d3416a51e64c11cc6052c08ea810dad3636db5d96eaba56cb08b4c39b27a1ccf
    Public key SHA-256 286a347977dd5d303cb23a534fe4422acc345b49ab69542dbaa4b7ab03a1bcb2
    Certificate
    Issued by YR1
    Valid 2026-11-02 19:16 UTC to 2027-01-31 19:16 UTC
    Logged 2026-11-02 20:15 UTC in Google ParcelYard2027h1, entry 577,788,518
    SHA-256 3386eac14405e520810ed37bb1e23459af9caf145dc4fedba1d909fecc12f21d
    Public key SHA-256 5adf7a5ba2743295780ef040684a28bca7dafd288cc81fe787717e0e9f00c460
    PhishDestroy
    Brand
    Uniswap
    Addresses
    31.220.1.30 · Seychelles · AS206264 AMARUTU-TECHNOLOGY Amarutu Technology Ltd
    Domain
    uniswap-app.to
    Registered
    2025-12-04 · Tonic
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  17. uniswap-app.to SC · AS206264 · AMARUTU-TECHNOLOGY Amarutu …
    ReportedPhishing hostReported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    uniswap-app.to
    First seen
    2026-10-27 22:52 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 31.220.1.30.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 31.220.1.30
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-27 21:50 UTC to 2027-01-25 21:50 UTC
    Logged 2026-10-27 22:49 UTC in Google PlumbersArms2027h1, entry 479,457,022
    SHA-256 d3416a51e64c11cc6052c08ea810dad3636db5d96eaba56cb08b4c39b27a1ccf
    Public key SHA-256 286a347977dd5d303cb23a534fe4422acc345b49ab69542dbaa4b7ab03a1bcb2
    Certificate
    Issued by YR1
    Valid 2026-11-02 19:16 UTC to 2027-01-31 19:16 UTC
    Logged 2026-11-02 20:15 UTC in Google ParcelYard2027h1, entry 577,788,518
    SHA-256 3386eac14405e520810ed37bb1e23459af9caf145dc4fedba1d909fecc12f21d
    Public key SHA-256 5adf7a5ba2743295780ef040684a28bca7dafd288cc81fe787717e0e9f00c460
    PhishDestroy
    Brand
    Uniswap
    Addresses
    31.220.1.30 · Seychelles · AS206264 AMARUTU-TECHNOLOGY Amarutu Technology Ltd
    Domain
    uniswap-app.to
    Registered
    2025-12-04 · Tonic
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  18. uniswapdex.info US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    uniswapdex.info
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Certificate logged in CT
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-10-26 04:33 UTC to 2027-01-24 05:30 UTC
    Logged 2026-10-28 04:39 UTC in DigiCert Wyvern2027h1, entry 329,381,157
    SHA-256 3d1df67ed4fe80fd6122a2d8493e79a113200dca923e28043a65b116490aaac4
    Public key SHA-256 973c8b9636ab4d499434607f49aef9afb9021dd09b9ff8e8dc4003c45a65e579
    Brand
    Uniswap
    Addresses
    104.21.55.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:377b
    2606:4700:3033::ac43:941a
    Cloudflare
    Cloudflare (104.21.55.123, 172.67.148.26): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    uniswapdex.info
    Registered
    2026-06-30 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:28 UTC

    Suggest a correction

  19. uniswap.fi US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    uniswap.fi
    First seen
    2026-10-27 01:46 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. We matched its certificate name
    3. Latest DNS check
    Certificate
    Logged in DigiCert Wyvern2027h1, entry 318,959,174
    SHA-256 e18bd4bbd741610f0108b394de5ad14ebfa149d157d8fb6837e2db8897162850
    PhishDestroy
    Brand
    Uniswap
    Addresses
    104.21.51.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:33fc
    2606:4700:3037::ac43:c084
    Cloudflare
    Cloudflare (104.21.51.252, 172.67.192.132): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    uniswap.fi
    Registered
    2023-11-14
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:26 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Uniswap when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Crypto & web3

All brands →