eth-quickswap[.]click

The domain eth-quickswap.click was registered on June 08, 2026 through Dynadot, LLC and currently resolves to the IPv4 address 130.12.180.128. Multiple security vendors have identified the site as malicious: PhishDestroy, MetaMask, and SEAL have each added it to their blocklists, and the domain appears on three additional public blocklists. VirusTotal scans show that seven of ninety‑one scanners flag the domain as malicious, reinforcing the suspicion of abuse. The threat is classified as generic phishing and the risk level is elevated, with the status marked as active.

Infrastructure analysis reveals a single IP hosting location, but no public SSL certificate details or HTTP response codes have been disclosed, leaving the transport security posture uncertain. No page title or content metadata is available in the supplied intelligence, so the exact appearance of the site cannot be confirmed. Defenders should immediately block any outbound connections to 130.12.180.128 and add eth-quickswap.click to local deny lists.

Monitoring of DNS queries for this domain is advised, as well as inclusion of the domain in threat‑intelligence feeds used by firewalls and secure web gateways. Given the existing vendor detections and VirusTotal flags, it is prudent to treat any user‑initiated access as potentially credential‑harvesting. Continuous re‑evaluation is recommended should additional indicators such as SSL certificates, HTTP status codes, or page content become available.