kittenswap[.]io

Analysis shows that kittenswap.io is an active crypto‑related scam infrastructure. The domain resolves to IP 172.67.179.93, which belongs to Cloudflare (AS13335) and is hosted in the United States. DNS is served by donald.ns.cloudflare.com and hera.ns.cloudflare.com. The site presents a valid HTTPS certificate issued by Let’s Encrypt (R13) and employs Google Web Server, HSTS, and HTTP/3, indicating a modern web stack. HTTP requests receive a 301 redirect, and the page title returned is “KittenSwap - Community Owned Metadex on HyperEVM,” suggesting an attempt to appear as a decentralized exchange. The domain was registered on August 29 2025 through Dynadot LLC. Threat intelligence flags it as a crypto scam; four of ninety‑five VirusTotal scanners have raised warnings, and it appears on a single security blocklist. PhishDestroy has already blocked the domain, and Gridinsoft assigns it a trust score of 0 / 100, reinforcing its malicious nature. While the exact phishing payload and user‑interaction flow have not been observed, the combination of a recent registration, high‑profile SSL, and targeted crypto terminology indicates a high‑risk threat to cryptocurrency users. Defenders should block kittenswap.io at perimeter and DNS layers, monitor for any outbound connections to the associated IP address, and advise users to avoid any unsolicited requests referencing KittenSwap or HyperEVM. Continuous re‑assessment is recommended as the infrastructure may evolve.