v3-simple-swap[.]net

The domain v3-simple-swap.net was a generic phishing site targeting cryptocurrency users. It operated as a scam page designed to deceive victims into disclosing sensitive information or transferring digital assets, though no specific brand or drainer kit was identified. As of the latest verification, v3-simple-swap.net has been taken offline, but its prior activity poses residual risks to users who may have interacted with it.

Technical analysis shows v3-simple-swap.net was flagged by 2 of 95 VirusTotal security vendors, including Fortinet and Seclookup. The domain was created on 2026-02-21 and resolved to the IP address 172.67.186.210, hosted on Cloudflare's infrastructure (AS13335) in the US. It appeared on 1 security blocklist, PhishDestroy, and used an SSL certificate issued by WE1. The observed page title was 'v3-simple-swap.net | 502: Bad gateway', indicating server-side issues at the time of assessment.

Users who visited v3-simple-swap.net should assume potential exposure and take immediate action. For cryptocurrency-related risks, revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. If login credentials were entered, change passwords on all associated accounts and enable two-factor authentication. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader mitigation efforts.