Is uniswap.st safe? TrustSniffer's low-trust assessment: 25/100

uniswap.st
Download PDF Check another site How we score

Verdict

Several risk patterns were present. Do not send money or personal details until you have verified this business another way.

25 OUT OF 100
Low Trust

uniswap.st is low-trust and potentially risky.

Sensitive Interaction Risk Governance Risk

Assessed 2026-10-20 by automated analysis. Classification confidence 55%.

What this site appears to beA Cloudflare security interstitial warns that the requested website has been reported for potential phishing and offers an 'Ignore & Proceed' option. The underlying site content is not present in the capture, so its services, forms, and claims cannot be assessed; the third-party phishing report is the only substantive signal.

Evidence status and limitations

Evidence completeness: Not recorded

  • The real-world operator identity was not independently verified.
  • Module-level completeness metadata is unavailable for this legacy report.

At a glance

The checks that decide most of this verdict.

Malware engines2 flagged itVirusTotalRisk
Google Safe BrowsingNot listedGoogleClear
Abuse reports on the host0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reportsClear
Domain age29 days oldMost scam domains are under a year oldRisk
CertificateEncrypted connectionIssued by YE1Noted
Hosted byCLOUDFLARENETServer in USNoted

The page as captured

https://uniswap.st/
Screenshot of the uniswap.st homepage captured during the TrustSniffer assessment
What uniswap.st served when TrustSniffer captured it on 2026-10-20. The page may look different now.

Key findings

  • Automated classification: Sensitive Interaction Risk.
  • Domain age: less than 1 year (registration continuity).
  • At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
  • The operator behind the site could not be independently connected to a real-world brand or person.

Full analysis

Overview

uniswap.st is a very recently registered website whose only observable presentation to a visitor is a Cloudflare "Suspected Phishing" interstitial. It states that the requested site has been reported for potential phishing and offers an "Ignore & Proceed" option. No products, services, forms or business model could be observed behind the warning, so the site's purpose cannot be determined from the capture. The domain name evokes a well-known decentralized-exchange brand.

Scam/Impersonation Risk

This is a high-risk case. The domain is blacklisted: more than one independent threat-intelligence source flags it, and the interstitial independently reports it for potential phishing. These are confirmed contradictory signals, not soft reputational noise. The domain label echoes a prominent exchange brand, and the site is only weeks old. Taken together, that pattern is typical of look-alike domains used to harvest credentials or wallet authorisations. The captured page contained no login form, hidden form or wallet-interaction behaviour, and no brand impersonation was established from page content. This is because the underlying site never rendered, not because it was shown to be clean. No conflicting legal identities were observed. The decisive concern is the combination of an active blacklisting, a phishing report and a freshly created domain, with nothing on the page to offset them.

Evidence
  • The homepage capture shows only a security interstitial stating the site "has been reported for potential phishing", with no site content behind it.
  • Multiple threat-intelligence engines currently flag the domain as malicious, and an external blacklist hit is confirmed.
  • Domain registered on 2026-09-22, about 28 days old (0.08 years) at assessment.
  • The capture recorded a bot-protection challenge and a blocked response (HTTP 403), so the real page content was never exposed.

Regulatory Verification Notes

No licensing claim, regulator reference, legal-entity name or terms page was available. Only the warning interstitial was captured, so regulatory status cannot be assessed and no third-party regulatory standing was found. This is a verification gap and is not by itself evidence of wrongdoing. The recorded registration details are incomplete, which amounts to ownership opacity and is separate from any identity contradiction. A DV certificate and mainstream hosting are present but establish nothing about who operates the site. No broker-reputation match exists for this domain. The site reads as an unverified, unlicensed-by-evidence entity that is promoting nothing identifiable.

Evidence
  • Registrar is ST Registry. The registration runs from 2026-09-22 to 2027-09-22, a one-year term with the registrant record incomplete.
  • Served from AS13335 (Cloudflare, Inc., US).
  • TLS certificate issued by YE1 (DV, domain validation only), valid to 2026-12-21, about 62 days remaining.
  • No license authority, license number or legal-entity name appears in the captured content.

What to Verify Next

Because the site's own content was never visible, verification must start outside the site. Confirm the genuine address of the exchange brand the domain name resembles through an independent, offline or bookmarked route, and compare it with this domain. Check whether the phishing report and the threat-intelligence listings remain active, since a later clean re-scan is the only way to establish that the situation has changed. Confirm any official support or contact channels through that independently sourced brand channel rather than anything offered here.

Evidence
  • The interstitial gives no site-side contact, legal or ownership information to cross-check.
  • The domain label is the only available link to a real-world brand, and that link is unverified.
  • Identity verification remains unconfirmed, with no corroborating signals for any operator.

Summary Verdict

The available evidence supports a clearly cautionary, elevated-risk posture. Active third-party flagging, a phishing report and an unverified, very young domain converge, and the protections around the site cannot outweigh them. Nothing observed supports treating the site as legitimate or its operator as identified.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a CDN edge node, so the origin server could not be seen or independently verified. This protection is only a mitigating factor. It also means hosting cannot be verified and content could be swapped without notice. The young domain with sparse subdomains is an unconfirmed heuristic and is weighed only as context. The valid DV certificate adds encryption in transit but no assurance about the operator.

Closing Assessment

Interaction should be avoided. This means not using "Ignore & Proceed", not entering credentials, and not authorising any payment or asset-related action. Any access should be limited to passive viewing with no data submitted. Users who need the genuine service should reach it through a previously verified bookmark or official channel, and should reassess this domain only if the listings and phishing report are lifted.

Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.

What the analysis found

3 findings contributed to this verdict, raised by page content, several checks together, hosting and network.

01 Page content

  • The review of the page content rated it high risk.Page content rule:PAGE_RISK_HIGH
  • The page shows few of the signs expected from a trustworthy operator.Page content rule:PAGE_TRUST_QUALITY_LOW
  • The page content shows at least one warning sign that deceptive sites commonly use.Page content rule:PAGE_RED_FLAGS_SOME
  • The browser raised a warning while loading the page.Page content rule:PAGE_BROWSER_FLAGS_SUSPICIOUS

02 Several checks together

  • Several independent checks pointed to risk at the same time.Several checks together rule:HYB_MULTIPLE_MODULES_HIGH_RISK

03 Hosting and network

  • The domain was registered less than three months ago.Hosting and network rule:DNS_NEW_DOMAIN_90D

Identity verification

StatusUNVERIFIED
Identity score30/100
Identity verification confidence50%
  • No on-site identity signals detected

Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.

What TrustSniffer observed

First-party facts recorded during the assessment of uniswap.st.

  • The request stayed on uniswap.st. It was not redirected to another domain. Clear
  • Registration is published under ST Registry. Clear
  • DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
  • The registration is paid up to 2027-09-22. Noted
  • It is hosted on CLOUDFLARENET, from a server in US. Noted

Domain intelligence

RegistrarST Registry
HostingCLOUDFLARENET - Cloudflare, Inc., US
CountryUS
Server IP2606:4700:3030::6815:28c4
Name serversulla.ns.cloudflare.com, clark.ns.cloudflare.com
CDN / edge networkDetected (cloudflare)
Resolved IP addresses4
Edge IP addresses4
Likely origin IP addresses0
SSL issuerYE1
SSL expiry2026-12-21
Domain age0.08 years (continuous registration)
Domain expiry2027-09-22
Archive first seenNot available
Archive snapshotsNot counted (archive lookup incomplete)
ReputationVirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches

About this assessment

A trust score summarises the evidence TrustSniffer could collect about uniswap.st at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

Already paid or signed in? Do this now

Act fast. The sooner your bank knows, the better the chance of stopping the payment.

  1. Call your bank or card company now. Use the number on the back of your card. Ask them to stop or reverse the payment.
  2. Paid with crypto? Contact the exchange or wallet app you sent it from today. Give them the address you paid.
  3. Signed in or shared a password? Change it now, on every site where you use it, and turn on two-step sign-in.
  4. Report it to the police. In the US you can also report at reportfraud.ftc.gov and ic3.gov. In other countries, use your national police or fraud reporting service.
  5. Keep the evidence. Save screenshots, receipts, emails and chat messages. Your bank and the police will ask for them.
  6. Ignore anyone who offers to get your money back for a fee. These "recovery" offers are often a second scam.

Looking for the real site? Type the company name into a search engine yourself, or use the web address printed on your card, bill or letter. Do not use links from messages or ads.

Common questions about uniswap.st

Is uniswap.st a scam?

TrustSniffer found several risk patterns on uniswap.st. It scored 25 out of 100 on 2026-10-20, a low-trust result. That is not proof of fraud: it means the evidence did not support treating the site as safe.

Is uniswap.st safe to use?

Several risk patterns were present. Do not send money or personal details until you have verified this business another way.

What is the trust score of uniswap.st?

uniswap.st scored 25 out of 100 on 2026-10-20, which places it in the low-trust band. The score is built from the domain's age and registration history, its hosting and certificate, the content of the site itself, and third-party reputation data. There is no human rating and no user review in it.

Download this report as PDF Free, no account needed. Create one to keep a history of the sites you check.
By AminRez, Founder & Lead Security Researcher, TrustSniffer
Produced by the TrustSniffer Analysis Engine · assessed 2026-10-20 · how we assess · report a mistake