si-mpleswap[.]org

PhishDestroy identifies si-mpleswap.org as an active cryptocurrency wallet phishing domain posing as a Simpleswap clone. The site is currently operational and engages in fraudulent activities designed to deceive users into entering their private keys or seed phrases under the guise of cryptocurrency swapping services. This domain is not affiliated with the legitimate Simpleswap platform and should be treated with extreme caution.

This domain was flagged by 1 of 95 VirusTotal security vendors, indicating limited but concerning detection. It is registered through Dynadot LLC, resolves to IP address 130.12.180.128, and was created on April 29, 2026. It appears on one security blocklist and is blocked by MetaMask, a widely used cryptocurrency wallet extension. The domain uses a Let's Encrypt SSL certificate, which does not validate its legitimacy. These technical indicators collectively suggest an elevated risk profile.

Given the active status of this phishing domain and its specific targeting of cryptocurrency users, immediate action is strongly recommended. Users should avoid accessing si-mpleswap.org entirely and should not enter any credentials or cryptocurrency-related information on this site. If you have previously interacted with this domain, assume your private keys or seed phrases may have been compromised and take immediate steps to transfer funds to new, secure wallets. Report this domain to your antivirus provider, browser security extensions, and relevant cryptocurrency platforms. For ongoing protection, use hardware wallets and verify website URLs through official channels before any transaction. Regularly monitor your cryptocurrency accounts for unauthorized activity.