btc-swaps[.]com

PhishDestroy identifies btc-swaps.com as a Bitcoin swap drainer phishing domain targeting cryptocurrency users seeking trustless exchanges. This domain mimics legitimate Bitcoin swap services to deceive victims into connecting malicious wallets, granting unauthorized fund approvals, and draining assets. The site leverages spoofed swap interfaces to trick users into signing malicious transactions, a common tactic among drainer-as-a-service (DaaS) kits observed in 2025 campaigns. This domain was flagged as a generic phishing site after being registered through SOLLUTIUM LLC on January 26, 2026. It resolves to IP address 188.114.97.3 and operates under a Google Trust Services SSL certificate, which may lull users into a false sense of security. VirusTotal currently shows 0 detections across 95 scanning engines, indicating it remains under the radar. It has not been added to Google Safe Browsing (GSB) as of the latest assessment. The domain’s recent creation date and lack of blocklist inclusion suggest it is part of a rapidly evolving campaign. As of the current assessment, btc-swaps.com remains active and under investigation, with no confirmed takedown or blocklisting. Users should avoid interacting with this domain entirely. Immediate action includes blocking the domain at the network level and reporting it to abuse channels. While technical indicators suggest low detection rates, the risk of asset loss remains high due to the drainer’s functionality. PhishDestroy advises extreme caution with any unsolicited cryptocurrency swap links and recommends verifying URLs through official project channels before engaging.