simpleswap[.]capital

Analysis indicates that simpleswap.capital is a recently registered domain exhibiting multiple high-risk indicators consistent with phishing activity targeting cryptocurrency users. The domain was created on July 03, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu and remains active as of July 25, 2026. Infrastructure analysis reveals it resolves to the IP address 91.92.241.159, which has previously been associated with suspicious hosting environments.

The domain is currently flagged by one security vendor, PhishDestroy, and is detected by 3 of 91 security vendors on VirusTotal, suggesting early but growing recognition of its malicious nature. Nameservers ns1.metaquotes.business and ns2.metaquotes.business further link the domain to infrastructure commonly used for financial scams, particularly those involving cryptocurrency or trading platforms. While the exact content of the site has not been fully analyzed, the domain name and detection patterns strongly suggest an attempt to impersonate a legitimate cryptocurrency exchange service.

Defenders should treat this domain as high-risk and prioritize blocking or monitoring access to it. Network security teams are advised to review logs for connections to 91.92.241.159 and the associated nameservers, as well as to implement real-time blocking based on available threat intelligence feeds. No SSL certificate details or HTTP response data are currently available to confirm the site's operational status or content, but the combination of registration recency, hosting infrastructure, and early detection by security vendors warrants immediate caution.