d-swap-v4[.]app

The domain d-swap-v4.app is a generic phishing site targeting cryptocurrency users. It operates as a scam designed to deceive victims into disclosing sensitive information or transferring digital assets, with no specific brand impersonation or drainer kit identified. As of the latest verification, d-swap-v4.app has been taken offline, though its prior activity poses residual risks to users who may have interacted with it.

Technical indicators confirm d-swap-v4.app was flagged by 3 of 95 VirusTotal security vendors, including CRDF, Gridinsoft, and Trustwave, while appearing on 1 security blocklist (PhishDestroy). The domain was registered through Cloudflare, Inc., and resolved to the IP address 188.114.96.3, hosted on Cloudflare's US-based infrastructure (AS13335). No SSL certificate was observed, and the page returned a '403 Forbidden' or '429' HTTP status. Nameservers were novalee.ns.cloudflare.com and tanner.ns.cloudflare.com, with no creation date available. Gridinsoft assigned a trust score of 0/100, further indicating malicious intent.

Users who visited d-swap-v4.app should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new cryptocurrency wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication (2FA). Monitor financial statements for unauthorized transactions and report the domain to platforms like Google Safe Browsing, PhishTank, or local cybercrime authorities to aid in mitigation efforts.