verifiedswiftchain[.]pages[.]dev

This domain is flagged as a high-risk crypto drainer, specifically designed to impersonate the legitimate Multichain cross-chain router protocol. Analysis indicates the site employs deceptive branding to trick users into connecting wallets, enabling unauthorized fund transfers through malicious smart contract interactions. The infrastructure mimics authentic decentralized finance platforms, leveraging visual and functional elements to exploit trust in established crypto services. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.163. The SSL certificate is issued by Google Trust Services, a common tactic to appear legitimate. The domain was created on April 11, 2026, and is currently offline but previously appeared on four security blocklists, including MetaMask, PhishDestroy, SEAL, and OISD. VirusTotal reports 14 out of 95 security vendors flagging this domain, while Gridinsoft assigns a trust score of 0/100. Detected technologies include Vue.js, SweetAlert2, jsDelivr, HSTS, crypto-js, cdnjs, and Cloudflare, all of which are frequently used in both legitimate and malicious web applications. To mitigate risks associated with this crypto drainer impersonation, users should immediately revoke any connected wallet permissions associated with the domain. Verification of smart contract interactions through blockchain explorers is recommended to identify unauthorized transactions. Organizations should update security blocklists to include this domain and monitor for related infrastructure, such as IP addresses or SSL certificates tied to the threat actor. Users are advised to rely solely on official, verified channels for interacting with decentralized finance protocols and to enable transaction simulation tools to preview wallet interactions before execution.