swap[.]myaoge[.]fun

The domain swap.myaoge.fun has been identified as a generic phishing site targeting users of the AogeSwap platform. Analysis confirms the domain was actively impersonating the legitimate AogeSwap service, presenting a page titled 'AogeSwap' to deceive visitors into entering sensitive credentials or financial information. As of the latest assessment, the domain has been taken offline, though prior activity warrants continued monitoring. Infrastructure analysis reveals the domain was registered through Name.com, Inc on February 21, 2026, an unusually future-dated creation timestamp that may indicate registry manipulation or data entry error. It resolved to the IP address 64.29.17.65 and was flagged by 2 of 95 security vendors on VirusTotal. The domain appears on one security blocklist and holds a trust score of 0/100 from Gridinsoft. Detected technologies include Vercel hosting and HTTP Strict Transport Security (HSTS), with a Let's Encrypt SSL certificate providing HTTPS encryption—common tactics used to lend false legitimacy to phishing sites. Current status indicates the domain is offline, though residual risk remains due to potential DNS caching or delayed takedown propagation. Organizations and users are advised to block the domain and its associated IP (64.29.17.65) at the perimeter. Security teams should review logs for connections to swap.myaoge.fun or the IP address between February 21 and the takedown date. End users who accessed the site should reset credentials for any financial or cryptocurrency platforms, particularly if login attempts were made. Future monitoring should include newly registered domains containing 'aoge' or 'swap' keywords, especially those using Vercel or Let's Encrypt certificates.