# pawswap.xyz — SUSPICIOUS

> pawswap.xyz is a crypto drainer scam with 1/95 VirusTotal detections. SSL-backed domain impersonates a crypto swap service. Avoid this site immediately.

## Summary
PhishDestroy identifies pawswap.xyz as an active crypto drainer scam posing as a legitimate token-swapping platform. The domain exhibits elevated risk due to its recent creation, low detection rate, and infrastructure aligned with malicious cryptocurrency theft. This campaign targets users seeking fast token exchanges, luring victims into connecting wallets and signing malicious transactions that drain funds without user awareness.  

This domain was flagged with a domain creation date of May 17, 2024, and resolved to IP address 104.21.33.51. The SSL certificate is issued by Let's Encrypt, and the domain is registered through Go Daddy, LLC. VirusTotal shows only 1 out of 95 security vendors currently detecting this site as malicious. No known blocklist entries were identified in public feeds at the time of assessment, and domain trust scores are minimal due to its recent registration and lack of historical legitimacy.  

To mitigate exposure to this threat, users must avoid visiting pawswap.xyz and any linked pages. Never connect your cryptocurrency wallet or enter seed phrases on untrusted sites. Use hardware wallets for high-value transactions and verify URLs through official project channels. Block the domain and IP (104.21.33.51) at the network firewall level. Report the domain to your antivirus provider and share intelligence via threat-sharing platforms. If funds were lost, file a report with local cybercrime units and blockchain analytics firms for potential fund recovery.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2024-05-17 04:06:47
- Registrar: Go Daddy, LLC
- IP: 104.21.33.51

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/decf92f6-2437-4d03-a021-dea0b2fee412
- PhishDestroy: https://phishdestroy.io/domain/pawswap.xyz/
- LLM endpoint: https://phishdestroy.io/domain/pawswap.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pawswap.xyz/
Last updated: 2026-03-25