swapverse[.]net

The domain swapverse.net is a generic phishing site that targeted cryptocurrency users with a fraudulent download page titled 'SwapVerse Download'. It did not impersonate a known brand or deploy a drainer kit but was classified as a cryptocurrency scam. As of the latest verification, swapverse.net has been taken offline and is no longer accessible.

Technical indicators confirm swapverse.net as a low-reputation domain. It was flagged by 1 of 95 VirusTotal security vendors (Gridinsoft) and appeared on 1 security blocklist (PhishDestroy). The domain was registered through NameCheap, Inc. on June 9, 2025, and resolved to the IP address 154.84.56.136, hosted by AROSSCLOUD INC. (AS400619) in the US. Its SSL certificate was issued by R11, and it was included in 1 AlienVault OTX threat intelligence pulse. Gridinsoft assigned it a trust score of 0/100, further indicating its malicious nature.

Users who interacted with swapverse.net should assume their cryptocurrency wallet or credentials may be compromised. Revoke any token approvals granted to unknown contracts, transfer remaining funds to a new wallet, and monitor transaction history for unauthorized activity. Change passwords for any accounts accessed from the same device and enable two-factor authentication. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts.