hashswapx[.]cyou

Analysis of the domain hashswapx.cyou indicates that it is actively hosting a phishing page titled “Web3Mart”. The site resolves to the Cloudflare‑owned address 188.114.97.3, which is geolocated to Canada and is served through Cloudflare’s DNS infrastructure (olga.ns.cloudflare.com, toby.ns.cloudflare.com). The TLS certificate is issued by Let’s Encrypt (identifier YE1) and the HTTP response code is 200, confirming that the page is reachable. Registration data shows the domain was created through Gname.com Pte. Ltd., a registrar frequently used by malicious operators. The domain is listed on one public blocklist and has been flagged by the PhishDestroy sinkhole, demonstrating that at least one defensive feed has recognized it as malicious. VirusTotal scans report three positive detections out of ninety‑one scanners, providing additional corroboration of its malicious nature. The current risk rating is high and the infrastructure remains active. Defenders should block DNS resolution for hashswapx.cyou, add the IP address 188.114.97.3 to network deny lists, and monitor for any traffic that matches the Cloudflare nameservers associated with the domain. Because the page content has not been publicly dissected, further forensic capture of the page would be required to identify credential‑stealing fields or payloads. Until such analysis is performed, the domain should be treated as a confirmed phishing vector targeting users interested in Web3 services.