voidswap[.]finance

The domain voidswap.finance has been identified as a potential threat associated with credential theft. No specific brand impersonation has been reported; however, the nature of this threat concerns the unauthorized collection of user credentials, which is often seen in malicious financial setups. The page title includes references to 'Private Cross-Chain Swaps,' common terms in cryptocurrency, indicating its focus on the crypto market, which heightens the risk of exploitation for financial data.

Technical indicators reveal that the VirusTotal score stands at 0/95, meaning it has not yet been flagged by automated detection systems. The domain was registered through NameCheap, Inc. on February 21, 2026, and currently resolves to the IP address 216.198.79.1. Additionally, it has been recorded on one security blocklist and is known to utilize Vercel and HSTS technologies. The presence of an SSL certificate from Let's Encrypt indicates a level of encryption, but it does not ensure legitimacy, as attackers often employ encryption to lend credibility to their malicious sites.

Currently, voidswap.finance is taken offline, which indicates immediate mitigation steps have been taken. It has been blocked by PhishDestroy, limiting its access and potential impact. Given that the domain is currently offline, the immediate risk is lowered; however, it remains under investigation due to its initial indicators of being involved in credential theft. Continuous monitoring for any resurgence or similar domains is advisable to prevent future incidents.