Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@iqweb.io.
The latest stored availability evidence still shows the domain reachable; 6 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
support[.]defiswap-dex[.]com
Phishing and security check for support.defiswap-dex.com
“1inch DEX â #1 DEX Aggregator | Swap Tokens at the Best Rates”
support.defiswap-dex.com is currently listed on a security blocklist and is actively blocked by the PhishDestroy feed. VirusTotal analysis shows a single detection out of ninety‑one scanners, indicating that at least one security vendor has identified malicious behavior associated with the domain. The threat classification assigned to the domain is a crypto drainer, suggesting that it is used to lure victims into authorizing cryptocurrency transfers that are subsequently siphoned to attacker‑controlled wallets. The domain’s risk level is marked as elevated and its operational status is active as of the report date, August 02, 2026.
Publicly available intelligence does not include registrar details, hosting IP, SSL certificate information, HTTP response codes, or page title content for this domain. Consequently, the underlying infrastructure and any associated command‑and‑control endpoints remain unverified. The limited detection footprint—only one vendor flagging the domain—may reflect a recent deployment or a low‑profile campaign that has not yet been widely catalogued. Defenders should prioritize immediate containment by adding support.defiswap-dex.com to deny‑list rules at network perimeters, DNS resolvers, and endpoint protection suites.
Continuous monitoring of threat‑intel feeds for additional detections, passive DNS observations, and any emerging reputation changes is advised. Organizations that handle cryptocurrency transactions should enforce strict transaction approval workflows and educate users about unsolicited requests for wallet authorizations, as these are typical vectors exploited by crypto drainer campaigns. Until further forensic data becomes available, the domain should be treated as malicious and blocked across all relevant security controls.
Network Security Intelligence Registrar context
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Registration: defiswap-dex.com
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For the registrable domain defiswap-dex.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 1 identified
DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.
ddos-guard.net 100% confidenceVirusTotal Analysis
Archived Evidence
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of support.defiswap-dex.com · checked Aug 2, 2026
Evidence & External Reports
PD-20260802-7525AF Recipient: abuse@iqweb.io Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive