swap-centric[.]com

This domain, swap-centric.com, is identified as a phishing site impersonating CentricSwap, a decentralized finance (DeFi) platform. Analysis indicates the site was designed to mimic legitimate cryptocurrency swap services, likely to harvest user credentials, private keys, or facilitate unauthorized token transfers. No specific drainer kit signatures were detected in the available data, but the domain exhibits characteristics consistent with credential phishing and wallet-draining campaigns targeting DeFi users. Infrastructure analysis reveals the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 22, 2026, and resolves to the IP address 172.67.138.58. Security vendor detections on VirusTotal stand at 16/95, while Gridinsoft assigns a trust score of 0/100. The domain appears on two security blocklists and is blocked by multiple threat intelligence feeds. Technologies detected include HSTS, Cloudflare, and HTTP/3, suggesting the use of modern web infrastructure to evade detection and enhance perceived legitimacy. As of the latest assessment, swap-centric.com has been taken offline, reducing immediate risk to users. However, the domain's infrastructure remains registered and could be reactivated or repurposed for future malicious campaigns. Organizations and individuals are advised to monitor for related domains using similar naming conventions, enforce blocklisting of the IP address 172.67.138.58, and educate users on verifying domain authenticity before interacting with DeFi platforms. Proactive monitoring of newly registered domains under the same registrar may also mitigate future threats.