app2-thorwallet-swap[.]pages[.]dev

PhishDestroy is actively investigating app2-thorwallet-swap.pages.dev, which is suspected of being a crypto drainer. The domain is currently marked as active and requires further scrutiny to determine the extent of the threat it poses.

Analysis reveals that the domain is registered through Cloudflare, Inc. and resolves to the IP address 188.114.97.3. The SSL certificate is issued by Google Trust Services. Currently, the domain has a VirusTotal score of 6/95, indicating it has not yet been widely flagged as malicious by antivirus vendors. However, it appears on 3 security blocklists and is being blocked by MetaMask, ScamSniffer, and SEAL, suggesting it is recognized as a threat by several security services.

Given the indicators, app2-thorwallet-swap.pages.dev is considered a potential threat. It is recommended to block this domain to prevent potential crypto draining attacks. Users should exercise extreme caution if they encounter this domain and avoid entering any sensitive information or connecting their wallets. Continuous monitoring is advised to track any changes in its threat profile.