swaponix[.]io

The domain swaponix.io is a confirmed phishing site engaged in brand impersonation targeting Ethereum users. It presents itself as a legitimate cryptocurrency service but operates as a scam designed to deceive victims into disclosing wallet credentials or transferring funds. No drainer kit was identified, though the site was actively used for cryptocurrency fraud. As of the latest verification, swaponix.io has been taken offline.

Technical indicators confirm the malicious nature of swaponix.io. The domain was flagged by 3 of 95 security vendors on VirusTotal, including Gridinsoft, Seclookup, and Webroot, with a Gridinsoft trust score of 29 out of 100. It appears on one security blocklist, PhishDestroy, though Google Safe Browsing has not flagged it. Registered through GoDaddy.com, LLC on June 7, 2024, the domain resolves to the IP address 188.114.97.3, hosted on Cloudflare’s network (AS13335). The SSL certificate is issued by Google Trust Services (WE1), and the observed page title was 'Swaponix'. Detected technologies include Proton Mail, Node.js, Bootstrap, React, Next.js, Trustpilot, and Cloudflare services.

Users who interacted with swaponix.io should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords on all associated accounts and enable two-factor authentication. Report the domain to relevant platforms, including the impersonated brand (Ethereum), the registrar (GoDaddy), and anti-phishing organizations such as PhishTank or the Anti-Phishing Working Group. Monitor financial and cryptocurrency accounts for unauthorized activity.