bitswap[.]cx

Analysis of the domain bitswap.cx indicates it was registered on February 21, 2026, through CentralNic Ltd and configured with Cloudflare nameservers (georgia.ns.cloudflare.com, cameron.ns.cloudflare.com). The domain resolved to IP 104.21.80.1, hosted on Cloudflare's network (AS13335). As of July 24, 2026, the domain is offline, returning an HTTP 522 timeout error with the page title 'bitswap.cx | 522: Connection timed out.' No active content or phishing kit is observable due to the connection failure. The SSL certificate, issued by Google Trust Services (WE1), remains valid but provides no additional evidence of malicious intent beyond standard encryption.

One security vendor on VirusTotal flagged the domain as malicious, though the specific detection context is not detailed. The domain appears on a single security blocklist, classified under 'Crypto Scam' in available threat intelligence. No brand impersonation is explicitly confirmed in the page title or provided data, but the scam classification suggests it likely targeted cryptocurrency users, possibly mimicking an exchange or wallet service. The use of Cloudflare infrastructure is consistent with both legitimate services and threat actors seeking to obscure hosting origins.

Defenders should treat this domain as high-risk for crypto-related fraud. The offline status may indicate a takedown or temporary suspension, but historical DNS and WHOIS records should be preserved for forensic analysis. If the domain reactivates, monitoring for renewed phishing activity is recommended. Blocklist integration and endpoint protection rules should account for this domain's association with cryptocurrency scams.