MALICIOUS — CRITICAL
simpleswapdex[.]org
simpleswapdex.org mimics the legitimate SimpleSwap cryptocurrency exchange site but is a high-risk crypto drainer designed to steal digital assets.
- VirusTotal
- 14 detections
- Blocklists
- 2 · MetaMask, SEAL
- Disponibilidade
- Conteúdo indisponível · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
simpleswapdex.org — Conteúdo indisponível (HTTP 502). Tipo de golpe: Fake Exchange. Resumo das evidências: VirusTotal 14 detections (engine total unavailable) (ADMINUSLabs, ChainPatrol, alphaMountain.ai, AlphaSOC, BitDefender); URLQuery 2 alerts; Google Safe Browsing flagged; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 100/100. Registrador: Dynadot.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Evidence Analysis
simpleswapdex.org mimics the legitimate SimpleSwap cryptocurrency exchange site but is a high-risk crypto drainer designed to steal digital assets. Visitors who connect a wallet or enter credentials risk immediate fund loss through unauthorized transfers or private key harvesting. PhishDestroy identifies this domain as an active crypto drainer impersonating SimpleSwap. Intelligence shows it was registered on May 14, 2026 through Dynadot Inc, resolves to IP 130.12.180.128, and carries a valid Let's Encrypt SSL certificate. The domain is flagged by Google Safe Browsing for social engineering, blocked by MetaMask and InversionDNS, and detected by 14 of 95 VirusTotal security vendors. If you visited simpleswapdex.org, disconnect your wallet immediately and revoke any permissions via your wallet's app or web interface. Do not enter private keys, seed phrases, or transaction approvals. Run a security scan on your device and consider rotating sensitive credentials used on cryptocurrency platforms. Report the domain to your antivirus provider and wallet security teams to help block further abuse.
Cobertura dos dados13 recorded checks
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologias · 2 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100% de confiançaOpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.
openresty.org 100% de confiançaAnálise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of simpleswapdex.org · checked May 17, 2026
Evidências e relatórios externosIndependent lookups and source reports
PD-20260517-FA4712 Recipient: abuse@virtualine.org Victim safety and official reportingImmediate actions and verified reporting channels
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.