honeyswap[.]net

The domain honeyswap.net is currently active and presents a page titled "Honeyswap — Decentralized Exchange". The site is secured with a Let's Encrypt certificate (E8) and returns HTTP 200 responses. Infrastructure analysis shows the domain resolves to IP address 188.114.96.3, which is associated with a CDN provider located in Canada. The hosting configuration includes support for HTTP/3 and browser insight capabilities provided by the CDN. Registration data lists the registrar as Fewmoretaps OU operating under the name Trustname.com, with the domain creation date of 15 February 2023. Reputation signals are strongly negative: the domain appears on four security blocklists, including PhishDestroy, MetaMask, SEAL, and ScamSniffer, and is flagged by 19 of 91 VirusTotal scanners. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The listed scam type is a "Fake Exchange," indicating the site likely attempts to harvest credentials or funds by impersonating a legitimate decentralized exchange. No further technical artifacts such as malicious payloads or redirection chains have been disclosed at this time. Defenders should block honeyswap.net at perimeter and endpoint layers, continue to monitor DNS and network traffic for connections to the observed IP, and update local threat intel feeds to include the identified blocklist references. Users should be warned that any interaction with the domain is unsafe and may result in credential compromise or financial loss. Ongoing observation is advised to detect any changes in hosting or content that could modify the threat posture.