site-6850064241-usersp2p-com[.]pages[.]dev

This domain is flagged as a high-risk phishing site targeting users of decentralized finance (DeFi) platforms, specifically impersonating UserP2P multi-chain bridging and swapping services. Analysis indicates the site is designed to harvest cryptocurrency wallet credentials, seed phrases, and private keys by presenting a fraudulent interface mimicking legitimate cross-chain transaction services. The threat exploits user trust in DeFi infrastructure, potentially leading to unauthorized asset transfers and irreversible financial losses. Infrastructure analysis reveals the domain was registered through Cloudflare on April 04, 2026, resolving to IP address 188.114.97.3. It employs a Let's Encrypt SSL certificate (serial number E8) to create a false sense of security. Security vendor detection on VirusTotal shows 3 out of 95 engines flagging the domain as malicious. The domain appears on two security blocklists, including PhishDestroy and ScamSniffer, confirming its active phishing status. The page title explicitly advertises "UserP2P | Multi-Chain Bridging & Swapping" to enhance credibility with potential victims. Users who visited this domain should immediately revoke any wallet connections made through the site and transfer assets to a new wallet using a fresh seed phrase. All devices used to access the domain should undergo a full malware scan, as phishing sites frequently deploy additional payloads. If credentials were entered, assume they are compromised and monitor all linked accounts for unauthorized transactions. Report the incident to relevant blockchain security teams and consider filing a report with local cybercrime authorities. Future transactions should be verified through official UserP2P channels only, accessed via bookmarked URLs or verified social media profiles.