namswap[.]com

This domain, namswap.com, is flagged as a generic phishing site designed to impersonate a legitimate Nano cryptocurrency exchange platform. Analysis indicates the site mimics the branding of a fast Nano token swap service, likely to deceive users into entering wallet credentials or authorizing fraudulent transactions. The page title, 'Nanswap: Blazing Fast Nano Exchange,' reinforces the false legitimacy, while the underlying infrastructure suggests the use of a crypto drainer kit to siphon funds from victims' wallets. Infrastructure analysis reveals the following technical indicators: The domain resolves to IP address 188.114.96.3 and was registered on February 21, 2026, through NiceNIC International Group Co., Limited. It is detected by 6 out of 95 security vendors on VirusTotal, appears on one security blocklist, and has a Gridinsoft trust score of 0/100. The site employs Node.js, Express, Ant Design, and Cloudflare, including HTTP/3 and Browser Insights, to obfuscate its operations and evade detection. As of the latest assessment, namswap.com has been taken offline, likely following reports to hosting providers or domain registrars. However, the elevated risk remains due to the domain's recent creation date and the use of bulletproof infrastructure components. Users who interacted with the site should immediately revoke any wallet authorizations, check for unauthorized transactions, and monitor connected accounts for signs of compromise. The domain's registration details and hosting patterns suggest potential reuse or rebranding, warranting continued vigilance in cryptocurrency-related phishing campaigns.