v2-layerswap[.]com

The domain v2-layerswap.com is identified as a brand impersonation domain targeting the Bridge Scam. The current status of this domain is offline. Analysis indicates that this domain poses an elevated risk level due to its impersonation of a legitimate crypto bridge service, which can deceive users into providing sensitive information or performing fraudulent transactions.

Infrastructure analysis reveals that the domain v2-layerswap.com was registered through Tucows Domains Inc. and created on June 20, 2025. It resolves to the IP address 162.159.140.98, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain is associated with an SSL certificate WE1. VirusTotal reports that 14 out of 95 security vendors flag this domain as malicious. Additionally, the domain appears on 1 security blocklist, specifically PhishDestroy. These indicators suggest that the domain has been actively used for phishing and other deceptive activities, potentially leading to financial loss or data breaches for users.

The current status of v2-layerswap.com is taken offline. However, continuous monitoring is recommended to ensure it does not reappear or redirect to other malicious sites. Security teams are advised to block this domain at the network level and educate users about the risks of visiting unverified crypto bridge websites. Additionally, users should be encouraged to verify the authenticity of any crypto bridge services they intend to use by cross-referencing with official sources and trusted security platforms.