# claims-quickswap.exchange — SUSPICIOUS

> claims-quickswap.exchange is a live crypto draining site detected by 2/95 VirusTotal scanners. Impersonates QuickSwap to steal crypto assets.

## Summary
PhishDestroy identifies the active cryptocurrency-draining site claims-quickswap.exchange, which masquerades as a legitimate QuickSwap interface to trick users into connecting wallets and signing malicious transactions that silently drain tokens.


This domain was flagged by exactly 2 of 95 VirusTotal security vendors, uses a Let’s Encrypt SSL certificate, resolves to IP 188.114.96.3, and was registered on April 06, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently abused by short-lived malicious domains.


If you visited claims-quickswap.exchange, immediately revoke any wallet permissions using a reputable block explorer or wallet app, move remaining funds to a brand-new wallet, and run a malware scan on the device used to access the site. Never interact with unsolicited links promising “quick claims” or “instant swaps” and verify every URL against official sources before connecting wallets.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-06 03:42:19
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/claims-quickswap.exchange
- PhishDestroy: https://phishdestroy.io/domain/claims-quickswap.exchange/
- LLM endpoint: https://phishdestroy.io/domain/claims-quickswap.exchange/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/claims-quickswap.exchange/
Last updated: 2026-04-06