arcstableswap[.]app

As of July 24, 2026, the domain arcstableswap.app is actively being used for a crypto scam operation. The domain was registered through Name.com, Inc. on October 29, 2025, and currently resolves to the IP address 216.198.79.65, which is located in the United States and is part of the Amazon.com, Inc. network (AS16509). The site's page title, 'StableSwap AMM - Arc Network,' suggests that it may be attempting to mimic a legitimate cryptocurrency platform or network. The domain is flagged by 11 out of 95 security vendors on VirusTotal, indicating a moderate level of suspicion.

Additionally, the domain appears on one security blocklist, further corroborating its malicious nature. The Gridinsoft trust score for this domain is 0 out of 100, signifying a high level of risk. The domain is currently blocked by the PhishDestroy system, which is a positive measure for preventing access to the site. However, the HTTP status code 307 suggests that the domain may be redirecting users to another site, potentially to evade detection or to further the scam.

The site is also using Vercel for hosting and has implemented HTTP Strict Transport Security (HSTS), which could be an attempt to appear more legitimate to unsuspecting visitors. Given the high risk level and the active status of the domain, defenders should take immediate action to block this domain and educate users about the risks associated with visiting or interacting with it. The exact content of the site has not been fully analyzed, but the evidence strongly suggests that it is a phishing campaign targeting individuals interested in cryptocurrency platforms. Defenders should monitor for any related domains or IP addresses and take proactive measures to protect their networks and users.