bubbleswapexchange[.]site

Analysis of bubbleswapexchange.site indicates this domain was actively flagged as part of a cryptocurrency scam infrastructure. The domain, registered on May 16, 2025, through HOSTINGER operations, UAB, resolved to the IP address 185.166.188.93, hosted in the Netherlands under AS47583 (Hostinger International Limited). As of July 24, 2026, the domain is offline, returning a 403 Forbidden HTTP status with no SSL certificate present. No legitimate page content was observed prior to takedown, reinforcing its classification as malicious.

The domain appears on five security blocklists, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura, and holds a Gridinsoft trust score of 0/100, indicating high confidence in its fraudulent nature. Three of 95 security vendors on VirusTotal flagged the domain as malicious, though the absence of broader detection does not diminish its confirmed risk. Nameserver configuration was minimal, with only one nameserver recorded, a common trait in disposable phishing infrastructure.

While the exact content of the site remains unanalyzed due to its offline status, the available metadata—including the 'Crypto Scam' classification and the involvement of cryptocurrency-focused blocklists—suggests it targeted users of digital asset platforms. Defenders should treat this domain as compromised and maintain blocklist entries to prevent potential re-emergence. No evidence links this domain to a specific cryptocurrency brand, and no phishing kit or additional artifacts were identified in the available data.