antiswap[.]io

Analysis of antiswap.io as of July 24 2026 shows a domain actively hosting a cryptocurrency‑exchange monitoring site that has been classified as a generic phishing operation. The domain was registered on 21 February 2026 through NameCheap, Inc., and resolves to 45.13.151.72, an address owned by AS215703 FREAKHOSTING LTD located in Romania. The hosting infrastructure is fronted by Cloudflare, using the nameservers thomas.ns.cloudflare.com and hera.ns.cloudflare.com, and the site serves content over HTTPS with a Let’s Encrypt certificate (CN = antiswap.io, issued by E7). An HTTP 200 response is returned for the root URL, and the page title reported by crawlers is “AntiSwap — мониторинг обменников криптовалют”, confirming the site presents itself as a monitoring service for crypto exchangers in Russian.

Technical fingerprints reveal a stack consisting of PHP, Laravel, Nginx on an Ubuntu operating system, with ancillary libraries such as Unpkg, Tippy.js, and analytics from Yandex.Metrika. The domain appears on a single security blocklist and is listed by PhishDestroy as a malicious entry. VirusTotal scans have returned a single positive detection out of 93 vendors, indicating at least one security product has flagged the site. No additional intelligence such as OTX tags or Safe Browsing entries is available in the current feed.

The combination of recent registration, use of a reputable registrar, cloud‑based DNS, and a modest but non‑zero detection rate aligns with typical patterns observed in newly created phishing domains that target cryptocurrency users. Defenders should treat antiswap.io as a high‑risk indicator; network firewalls and email gateways should block outbound connections to the IP address and DNS queries for the domain. Users receiving unsolicited messages that reference “AntiSwap” or request interaction with the site should be warned that the domain is associated with a known crypto phishing campaign.