crypto-swap[.]live

This domain, crypto-swap.live, poses as a legitimate cryptocurrency exchange to deceive users into disclosing sensitive account details or transferring digital assets. The site specifically targets Crypto.com customers by mimicking its branding and offering fake trading services, as evidenced by the page title 'CryptSwap — Безлимитный Криптообменник' (Unlimited Crypto Exchange in Russian). Such impersonation schemes typically harvest login credentials, private keys, or prompt users to send cryptocurrency to attacker-controlled wallets under the guise of deposits or account verification. Analysis indicates this domain was registered on March 06, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, an uncommon registration pattern for legitimate financial services. It resolves to the IP address 188.114.96.3 and is flagged by 2 out of 95 security vendors on VirusTotal, including detection by three independent blocklists: MetaMask, PhishDestroy, and SEAL. The use of a Let's Encrypt SSL certificate, while standard for encryption, is frequently exploited by threat actors to create a false sense of security. If you visited crypto-swap.live or entered any information on the site, immediately cease all interaction and revoke any active sessions. Change passwords for associated accounts, particularly those linked to cryptocurrency wallets or exchanges, using strong, unique credentials. Enable multi-factor authentication where available. Monitor financial statements and blockchain transactions for unauthorized activity. Report the domain to relevant security teams, such as the impersonated brand's fraud department, and consider submitting the URL to additional threat intelligence platforms for broader awareness.