app[.]easyswiftsecuredfunds[.]com

Analysis of app.easyswiftsecuredfunds.com shows the domain was registered on February 21, 2026 and is currently taken offline. The site resolved to IP address 198.12.66.123, which belongs to a US hosting provider identified as AS36352 HostPapa. The SSL certificate associated with the domain received an R10 rating, indicating a low trust level. VirusTotal recorded a single detection out of 93 security vendors, and the domain appears on one public security blocklist.

Gridinsoft assigned a trust score of 0 out of 100, and the domain is listed as blocked by PhishDestroy. The page title returned by the server matches the domain name, providing no additional context. The campaign is classified as a brand impersonation targeting CoinMarketCap, suggesting that any login or credential collection pages would be crafted to resemble the legitimate service.

Evidence of the actual page content, phishing kit, or credential harvesting mechanisms is not available, and the site’s HTTP response codes have not been observed beyond the offline status. Defenders should incorporate the IP address 198.12.66.123 and the domain name into network‑level deny lists, monitor for any future DNS resolution attempts, and ensure that endpoint protection solutions are updated to reflect the single vendor detection. Given the low trust scores, blocklist presence, and the confirmed impersonation of a high‑profile cryptocurrency data provider, it is prudent to treat any traffic to this domain as malicious and to educate users about unsolicited requests purporting to originate from CoinMarketCap.