# paintswaps.io — SUSPICIOUS

> Discover why paintswaps.io was flagged for phishing and what risks it posed. Learn how to stay safe from scams linked to this domain.

## Summary
PhishDestroy identifies paintswaps.io as a medium-risk phishing domain designed to deceive users into revealing sensitive information. Though now offline, it appeared on multiple security blocklists, indicating a history of malicious activity.

This phishing operation likely tricked visitors by mimicking legitimate sites to steal login credentials or personal data. Attackers often use such domains to harvest information through fake forms or deceptive downloads.

If you visited paintswaps.io, it’s crucial to avoid entering any personal details and run a thorough security scan. Change any passwords that might have been exposed and stay vigilant against suspicious emails or messages.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: My fNFTs - Sonic Airdrop

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 5 hits
  Lists: ["PhishDestroy", "MetaMask", "Polkadot", "Enkrypt", "Codeesura"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01987fa0-a27d-703d-b221-cd9cf3fef944.png
- PhishDestroy: https://phishdestroy.io/domain/paintswaps.io/
- LLM endpoint: https://phishdestroy.io/domain/paintswaps.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/paintswaps.io/
Last updated: 2026-03-19