biswap[.]biz

This domain, biswap.biz, is identified as a brand impersonation threat specifically targeting Biswap, a decentralized cryptocurrency exchange. The site mimics the legitimate Biswap platform, presenting itself as a crypto exchange, DEX, and open-source decentralized exchange to lure users into interacting with malicious infrastructure. Such impersonation is commonly used to facilitate crypto drainers, credential theft, or fraudulent token transactions, putting users' assets and sensitive information at risk. Analysis indicates biswap.biz was registered on September 19, 2020, through GoDaddy.com, LLC, and currently resolves to the IP address 18.166.147.170. The domain is flagged by 5 out of 95 security vendors on VirusTotal, appears on one security blocklist, and holds a Gridinsoft trust score of 0/100. Infrastructure analysis reveals the use of Ubuntu, Bootstrap, and Nginx, with an SSL certificate issued by GoDaddy.com, Inc. The domain's low Scamadviser trust score of 41/100 further corroborates its malicious intent. Users who visited biswap.biz should immediately cease all interaction with the domain and any associated wallets or accounts. If credentials were entered, reset passwords and enable multi-factor authentication on all linked accounts. Review transaction histories for unauthorized activity, particularly in decentralized wallets, and revoke any suspicious smart contract approvals. Monitor financial accounts for signs of compromise and consider reporting the incident to relevant cybersecurity authorities or blockchain analytics platforms for further investigation.