v2-spookyswap[.]vercel[.]app

The domain v2-spookyswap.vercel.app is actively impersonating SpookySwap, a decentralized exchange (DEX) on the Fantom network. Despite being flagged by only 1 out of 94 vendors on VirusTotal, it is listed on four public blocklists, including PhishDestroy and MetaMask. This indicates a significant threat level, especially as it was detected on the same day it was created, April 4, 2026.

This domain employs cloaking techniques, serving benign content to scanners, which complicates detection efforts. Its cloaking score is low at 1/10, suggesting that it effectively evades some automated scanning tools. The domain is hosted by Vercel, Inc. in the United States, and uses an SSL certificate issued by Google Trust Services, which may lend it an appearance of legitimacy to unsuspecting users.

The platform risk score for v2-spookyswap.vercel.app is a high 98/100, underscoring its potential danger to users interacting with it. By mimicking the legitimate SpookySwap platform, this domain likely aims to deceive users into providing sensitive information or funds under the guise of swapping, farming, or earning BOO rewards. The presence on multiple blocklists and its immediate detection reflect the proactive measures taken by threat intelligence platforms to mitigate its impact.

Phishing domains like v2-spookyswap.vercel.app exploit the initial 24-72 hour window post-registration when many antivirus databases have yet to update. PhishDestroy's upstream detection pipeline captures such threats early, highlighting the importance of real-time threat intelligence in combating these evolving scams.