o-swap-v4[.]app

The domain o-swap-v4.app is a cryptocurrency phishing site classified as a generic phishing threat with an elevated risk level. It does not impersonate a known brand or use a recognized drainer kit but targets users with fraudulent cryptocurrency schemes. As of the latest verification, o-swap-v4.app has been taken offline, though prior activity indicates it was actively used for phishing.

Technical indicators show o-swap-v4.app was flagged by 3 of 95 VirusTotal security vendors, including CRDF, Gridinsoft, and Trustwave, while appearing on 1 security blocklist (PhishDestroy). The domain is registered through Cloudflare, Inc., with nameservers eva.ns.cloudflare.com and simon.ns.cloudflare.com. It resolves to the IPv6 address 2606:4700:3035::6815:5f44, hosted on Cloudflare's US-based infrastructure (AS13335). No SSL certificate was observed, and the page title displayed '403 Forbidden' during analysis. Gridinsoft assigned a trust score of 0/100, reinforcing its malicious classification.

Users who interacted with o-swap-v4.app should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new cryptocurrency wallet. Monitor transaction history for unauthorized activity and enable two-factor authentication on all accounts. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybercrime units to aid in takedown efforts and prevent further victimization.