io-swapcrypto[.]top

The domain io-swapcrypto.top was identified as a brand impersonation phishing site, specifically targeting MetaMask users. This threat is classified as a crypto drainer, designed to trick victims into connecting their wallets and stealing assets. The site's page title was "Success!," a common lure to create a false sense of security.

Technical indicators reveal that io-swapcrypto.top resolves to IP 188.114.97.3 and was registered through PDR Ltd, with a creation date of May 21, 2026. VirusTotal flagged the domain with a score of 4 out of 95 security vendors, indicating moderate detection. The domain appears on 3 security blocklists, and its SSL certificate was issued by Let's Encrypt (serial E8). Google Safe Browsing (GSB) status is not explicitly provided, but the domain's presence on blocklists suggests it was flagged by some threat intelligence feeds.

Currently, io-swapcrypto.top is offline, meaning the phishing site has been taken down. However, the risk remains that similar domains may appear. Users who may have interacted with this domain should revoke any wallet permissions and monitor for suspicious activity. PhishDestroy recommends always verifying URLs directly through official channels and using security tools to detect phishing attempts. No drainer kit name was identified in the available intelligence, but the site's behavior aligns with known crypto wallet drainer operations.