unionswap[.]app

The domain unionswap.app is a generic cryptocurrency phishing site designed to deceive users into connecting wallets or entering sensitive information under the pretense of a legitimate asset-bridging service. It does not impersonate a known brand or use a recognized drainer kit but presents itself as 'UnionSwap - Bridge your assets through the best routes.' As of the latest verification, unionswap.app has been taken offline and poses no immediate active threat.

Technical indicators show unionswap.app had 0 of 95 VirusTotal vendors flagging it, was not listed by Google Safe Browsing, and appeared on 2 security blocklists (PhishDestroy and ScamSniffer). The domain was created on 2026-02-21 07:01:08 and resolved to the IP address 35.214.178.171, hosted on Google LLC infrastructure in the Netherlands (AS19527). The SSL certificate was issued by R11, and the observed page title matched the fraudulent service description.

Users who interacted with unionswap.app should immediately revoke any token approvals granted to the site via wallet management tools like Etherscan or Revoke.cash. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Report the domain to platforms such as PhishTank, ScamAdviser, or local cybercrime units to aid in broader takedown efforts. Enable two-factor authentication on all accounts and remain vigilant for follow-up phishing attempts.