esvap[.]finance

The domain esvap.finance is a generic phishing site designed to deceive users into disclosing sensitive information such as login credentials or personal data. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, esvap.finance has been taken offline, reducing immediate risk to potential victims.

Technical analysis of esvap.finance reveals limited detection, with 1 of 95 VirusTotal security vendors flagging the domain, including Kaspersky. The domain is registered through Devexpanse Ltd d/b/a Regery.com, though its creation date is not available. It resolves to the IP address 82.25.81.58, hosted by AS47583 Hostinger International Limited in the US, and appears on 1 security blocklist, PhishDestroy. No SSL certificate is present, and the observed page title was '409 Conflict'. Nameservers for the domain are sandra.ns.cloudflare.com and venkat.ns.cloudflare.com. Google Safe Browsing has not flagged esvap.finance, and Gridinsoft assigns it a trust score of 0/100.

Users who may have interacted with esvap.finance should immediately change any passwords or credentials entered on the site, particularly if reused across other platforms. Enable two-factor authentication (2FA) on all critical accounts to mitigate further risk. Monitor financial and online accounts for unauthorized activity. Report the phishing domain to relevant authorities or platforms, such as the Anti-Phishing Working Group (APWG) at reportphishing@apwg.org or through local cybercrime reporting channels.