# flashcrypto.exchange wallet-to-wallet swap page on PhishDestroy | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/flashcrypto.exchange/
Machine-readable companion: https://phishdestroy.io/domain/flashcrypto.exchange/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-29 17:22:11 UTC
- Last availability or vendor check: 2026-10-30 12:10:23 UTC
- Stored record updated: 2026-10-30 12:10:23 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: checked_clean

## Stored labels and detections

- Automated brand label (collector metadata; not a confirmed impersonation finding): coingecko

## Stored infrastructure

- Observed IP address: 104.21.5.109
- Registrar in stored WHOIS data: Global Domain Group LLC
- Registration date in stored WHOIS data: 2026-06-07 23:13:22 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a188ac-eeeb-7173-b9ef-153563006804/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/flashcrypto.exchange
- Certificate Transparency search: https://crt.sh/?q=%25.flashcrypto.exchange
- Web Archive lookup: https://web.archive.org/web/*/https://flashcrypto.exchange/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy shows the flashcrypto.exchange swap page, where visitors enter a receiving address and send funds for a no-account crypto exchange.

The captured flashcrypto.exchange page presents a wallet-to-wallet crypto swap form under the heading "Swap crypto wallet to wallet, no account needed." Visitors choose a send and receive pair, enter an amount and their receiving address, optionally add an email, and press "Exchange now" to start the exchange; the page advertises a 1% service fee, a 60-minute rate lock, and settlement within about 15 minutes after deposit confirmation.

VirusTotal's domain-scoped analysis dated 2026-10-18 recorded 0 detections out of 92 engines, with 0 malicious and 0 suspicious verdicts. No vendor flagged the domain in that analysis, so no representative flagged vendors can be named for this case.
Package revision: 14309376c0c893f913594b2d25e26b506eb60da3f9593ab4f9cdb7494f60b534
Text generated (not scan time): 2026-10-29 18:24:03
Reviewed evidence snapshot: {"domain":"flashcrypto.exchange","screenshot_available":true,"page_title":"No-KYC Crypto Exchange, Wallet to Wallet | FlashCrypto","original_meta_description":"Swap crypto wallet to wallet. No account or routine KYC, a 1% service fee and 60-minute rate lock. Most swaps settle within 15 minutes after deposit confirmation.","initial_ai_description":"The site claims to be a crypto exchange offering 'No-KYC Crypto Exchange, Wallet to Wallet' and prompts users to 'Swap crypto wallet to wallet' by entering their receiving address and sending funds. This is a common tactic used by fraudulent investment or crypto-drainer sites to solicit funds directly from users with promises of exchange services that are often not fulfilled or lead to loss of funds. The claim of 'No-KYC' is also a red flag often associated with illicit financial activities.","metadata_observed_on":"2026-10-29","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":0,"engines":92,"malicious":0,"suspicious":0,"retrieved_date":"2026-10-29","analysis_date":"2026-10-18","scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-29T17:22:55Z","final_host":"www.flashcrypto.exchange","captured_on":"2026-10-29"}}
Source facts (timestamps as stored): {"record_id":1707126,"first_recorded_at":"2026-10-29 18:22:11","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":0,"denominator":92,"malicious":0,"suspicious":0,"vendors":null,"observed_at":"2026-10-18T06:13:59Z","checked_at":"2026-10-29 18:22:48","fetched_at":"2026-10-29T17:22:48Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":0,"denominator":92,"malicious":null,"suspicious":null,"vendors":[],"observed_at":"2026-10-18 06:13:59","checked_at":"2026-10-29 18:22:48","fetched_at":"2026-10-29 17:22:49","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-10-29 18:22:50"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-29 20:30:13"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-10-30 13:10:23"}}

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a188ac-eeeb-7173-b9ef-153563006804.png
  Captured: 2026-10-29 17:22:11 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a188ac-eeeb-7173-b9ef-153563006804.png
  Captured: 2026-10-29 17:22:11 UTC
  Source report: https://urlscan.io/result/01a188ac-eeeb-7173-b9ef-153563006804/
- URLScan · 2026-10-29: https://screenshots.phishdestroy.io/us/01a188a8-176f-75ac-b7b1-0fe9b6e4bb1f.png
  Captured: 2026-10-29 17:14:51 UTC
  Source report: https://urlscan.io/result/01a188a8-176f-75ac-b7b1-0fe9b6e4bb1f/
  SHA-256: fc91ef99096b1dcab96cb4ca71cae226917163ae185b9403837a2d95360122d3
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/f250ab44-2fa5-484a-aaf8-17def23c5042.png
  Captured: 2026-10-29 17:22:55 UTC
  Source report: https://radar.cloudflare.com/scan/f250ab44-2fa5-484a-aaf8-17def23c5042
  SHA-256: a8ec1c4d3bec8862b5301b8472734873477e5fab203aa2ed189cfb4d98f72f70

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-29T17:23:11Z",
        "uuid": "01a188ac-eeeb-7173-b9ef-153563006804",
        "scanned_at": "2026-10-29T17:20:03Z",
        "final_url": "https://www.flashcrypto.exchange/en",
        "status": 200,
        "redirected": "parent-domain",
        "redirects": [
            {
                "to": "https://flashcrypto.exchange/",
                "from": "http://flashcrypto.exchange/",
                "status": 307
            },
            {
                "to": "https://www.flashcrypto.exchange/",
                "from": "https://flashcrypto.exchange/",
                "status": 308
            },
            {
                "to": "https://www.flashcrypto.exchange/en",
                "from": "https://www.flashcrypto.exchange/",
                "status": 308
            }
        ],
        "ip": "104.21.5.109",
        "domains": [
            "flashcrypto.exchange"
        ],
        "ips": [
            "104.21.5.109"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "9b5563f1c5e2e990456b4a6c23952513af4f776c27693e99684423e455da4670",
        "script_hashes": [
            "f0e6c42f909400f660d87984e126655d7e497251921c432adb143ec446ac0d67",
            "879ca99f6b011f7f33e9d4ef2238650836fec6e5b5a4c8406d9c36390cfd58ff",
            "a8f327419257fc2387639bb2cc2c866c03d1c392a8c407e1a77ae53e1c591353",
            "fdd54db0adcd1894788c7b08879f14d93b600dadd98c741ff42d3de34654da10",
            "b5f9b5199b99ab6c141f4540f0b7d0fe803c4ecf6956849ecb6e59d3d439272e",
            "f71175bd326765a2ac751417c8d60af0fa8982a64e33a05d37a3938ea2e85c9e",
            "2c7a9edcce888eee220b9509796ba6b5da8974ea7bbdcde9b65776df7c8b3e98",
            "f30bb45f3506f4ea8f93f7b7bb594600ff8ea5f545c138e8db86c17840d25289",
            "249dc994fb396c56323d330f7128f7b154ec3ed44977fbcaf583407e52cfd9cd",
            "cb5ab469bd21957ccaa98ac5d75efa0027d0b0379fd90ae5201192774fa1a52e"
        ],
        "globals": [
            "TURBOPACK",
            "__next_f",
            "next",
            "__webpack_hash__",
            "vam",
            "va",
            "vaq",
            "si",
            "vai",
            "sil"
        ],
        "tls": {
            "san": [
                "*.flashcrypto.exchange",
                "flashcrypto.exchange"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "flashcrypto.exchange",
            "protocol": "QUIC",
            "valid_to": "2027-01-15T21:00:54Z",
            "valid_from": "2026-10-17T21:00:55Z"
        },
        "domain_age_days": 143,
        "apex_age_days": 143,
        "tls_age_days": 11,
        "tls_valid_days": 89,
        "requests": 35,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 96,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "x-powered-by": "Next.js",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
            "content-security-policy": "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: http",
            "x-frame-options": "DENY",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-29T17:23:14Z",
        "uuid": "f250ab44-2fa5-484a-aaf8-17def23c5042",
        "scanned_at": "2026-10-29T17:22:55Z",
        "final_url": "https://www.flashcrypto.exchange/en",
        "status": 200,
        "redirected": "subdomain",
        "history": [
            {
                "url": "https://flashcrypto.exchange/",
                "status": 308
            },
            {
                "url": "https://www.flashcrypto.exchange/",
                "status": 308
            },
            {
                "url": "https://www.flashcrypto.exchange/en",
                "status": 200
            }
        ],
        "dom_hash": "26dc77228e642d2925074573ad020410ed47a33dfe86aa47fc337b61f2bdf4ef",
        "doc_hash": "784bfe318fb81b0779a6b68f95df9906c4d106d948774ac79fc17adff9c203f5",
        "domain_risks": [
            "Economy & Finance",
            "Business & Economy"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "flashcrypto.exchange",
                "type": "A",
                "value": "172.67.133.87"
            },
            {
                "name": "flashcrypto.exchange",
                "type": "A",
                "value": "104.21.5.109"
            },
            {
                "name": "flashcrypto.exchange",
                "type": "AAAA",
                "value": "2606:4700:3036::ac43:8557"
            },
            {
                "name": "flashcrypto.exchange",
                "type": "AAAA",
                "value": "2606:4700:3033::6815:56d"
            },
            {
                "name": "www.flashcrypto.exchange",
                "type": "A",
                "value": "172.67.133.87"
            },
            {
                "name": "www.flashcrypto.exchange",
                "type": "A",
                "value": "104.21.5.109"
            },
            {
                "name": "www.flashcrypto.exchange",
                "type": "AAAA",
                "value": "2606:4700:3033::6815:56d"
            },
            {
                "name": "www.flashcrypto.exchange",
                "type": "AAAA",
                "value": "2606:4700:3036::ac43:8557"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.15",
        "whois": {
            "registrar": "Global Domain Group LLC",
            "created": "2026-06-08T01:13:22Z",
            "updated": "2026-10-17T21:42:07Z",
            "expires": "2027-06-08T01:13:22Z",
            "nameservers": [
                "linda.ns.cloudflare.com",
                "miguel.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-29T17:22:48Z",
        "analysis_at": "2026-10-18T06:13:59Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "popularity": {
            "Majestic": 446418
        },
        "created": "2026-06-08T00:00:00Z",
        "updated": "2026-06-13T00:00:00Z",
        "first_seen": "2026-06-08T02:01:09Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "linda.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "miguel.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "google-site-verification=fuG3pWyTPFumwSLE_Zy_1bUFiiB98ElEl0RdizFfpgg"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "linda.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-18T06:23:10Z",
        "jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb",
        "cert": {
            "san": [
                "flashcrypto.exchange"
            ],
            "issuer": "Let's Encrypt / YR1",
            "serial": "5d4d0fdb1dfb5b4c1ced67afd176302e359",
            "sha256": "aae15503dda4b00829784cb19932236283c8a8e6d21ba0ef9fea97aff71bb6ab",
            "subject": "flashcrypto.exchange",
            "valid_to": "2026-11-06T16:00:38Z",
            "valid_from": "2026-08-08T16:00:39Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-06-08T01:13:22Z",
                "last changed": "2026-10-17T21:42:08Z",
                "registration": "2026-06-08T01:13:22Z",
                "registrar expiration": "2027-06-08T01:13:22Z",
                "last update of RDAP database": "2026-10-17T21:50:15Z"
            },
            "registrar": "Global Domain Group LLC",
            "registrar_iana_id": "3956"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-29T17:23:33Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "flashcrypto.exchange"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "robots_txt": {
            "present": true,
            "llms_txt": true,
            "sitemaps": [
                "https://www.flashcrypto.exchange/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 408
        },
        "social_tags": {
            "ogUrl": "https://www.flashcrypto.exchange/en",
            "title": "No-KYC Crypto Exchange, Wallet to Wallet | FlashCrypto",
            "author": "FlashCrypto.exchange",
            "ogType": "website",
            "ogImage": "https://www.flashcrypto.exchange/api/og",
            "ogTitle": "No-KYC Crypto Exchange, Wallet to Wallet | FlashCrypto",
            "ogSiteName": "FlashCrypto.exchange",
            "description": "Swap crypto wallet to wallet. No account or routine KYC, a 1% service fee and 60-minute rate lock. Most swaps settle within 15 minutes after deposit confirmation.",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://www.flashcrypto.exchange/en",
            "ogDescription": "Swap crypto wallet to wallet. No account or routine KYC, a 1% service fee and 60-minute rate lock. Most swaps settle within 15 minutes after deposit confirmation."
        },
        "trackers": {
            "requests": 22
        },
        "mixed_content": {
            "upgrade_insecure": true,
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 308,
            "timings": {
                "dns": 12,
                "tls": 26,
                "wait": 36,
                "connect": 9,
                "download": 0
            },
            "response_ms": 83
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 121382,
            "co2_grams": 0.0044,
            "cleaner_than": 18
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.35.95",
                    "host": "miguel.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.58.250",
                    "host": "linda.ns.cloudflare.com"
                }
            ],
            "zone": "flashcrypto.exchange"
        },
        "location": {
            "ip": "2606:4700:3036::ac43:8557",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "flashcrypto.exchange"
        },
        "dns": {
            "A": [
                "104.21.5.109",
                "172.67.133.87"
            ],
            "NS": [
                "miguel.ns.cloudflare.com",
                "linda.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"linda.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418405083, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "google-site-verification=cMfvXxA-w6PpUG-4tpWmNnUkRNx60MCg-i7IfQDy5aY"
            ],
            "AAAA": [
                "2606:4700:3036::ac43:8557",
                "2606:4700:3033::6815:56d"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": "DENY",
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": "1; mode=block",
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'u",
            "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3036::ac43:8557",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://flashcrypto.exchange",
                "https://www.flashcrypto.exchange/",
                "/en"
            ],
            "count": 2
        },
        "rank": {
            "domain": "flashcrypto.exchange"
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.flashcrypto.exchange"
            ]
        },
        "social_presence": {
            "profiles": [
                "https://x.com/flashcryptoex",
                "https://github.com/flashcrypto-exchange"
            ]
        },
        "linked_pages": {
            "internal_count": 44
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "x-powered-by": "Next.js",
                "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
                "content-security-policy": "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.jsdelivr.net https://coin-images.coingecko.com https://images.unsplash.com; font-src 'self'",
                "x-frame-options": "DENY",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()"
            }
        }
    }
}
```