swapuz[.]cc

This domain, swapuz.cc, is actively flagged as a high-risk phishing infrastructure targeting cryptocurrency exchange users. Registered on April 3, 2026, through Unstoppable Domains Inc., the domain resolves to IP 104.21.26.13 and is protected by Cloudflare, utilizing HTTP/3 for communication. The page title, 'Home | Swapuz,' suggests an attempt to mimic a legitimate cryptocurrency exchange platform, though the exact content and functionality of the site remain unanalyzed. Google Safe Browsing classifies this domain under 'SOCIAL_ENGINEERING,' and it appears in 22 threat intelligence pulses on AlienVault OTX, indicating widespread detection in security communities. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification. The domain is currently listed on two security blocklists, including PhishDestroy and BLP-Malware, and is flagged by 3 of 95 security vendors on VirusTotal. Defenders should treat this domain as an active phishing threat, particularly for users interacting with cryptocurrency services. Immediate blocking at the network and endpoint levels is recommended, along with monitoring for related domains or IPs that may emerge as part of the same campaign. Given the use of Cloudflare and a Google Trust Services SSL certificate, the infrastructure appears professionally configured, increasing the likelihood of successful social engineering attempts. No specific phishing kit or additional brand impersonation details are confirmed at this time.