Is swanbitcoinreports.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page "Crypto Tax Updates" notice branded as Swan Bitcoin and published on a newly registered ".live" domain whose name combines the brand with the word "reports". The page offers brief bulleted guidance on a possible 7–10% annual withholding tax, the new Form 1099-DA, the specific-lot relief deadline of December 31, 2026, crypto IRA trades, and taxable staking. It is delivered through a desktop-only gate that sends the visitor on to a transcript hosted on DocuSign. Its apparent purpose is to act as a customer-facing information gateway for a bitcoin accumulation and custody service that earns trading and service fees.

Scam/Impersonation Risk

The overall assessment is clearly cautionary. A confirmed blacklist listing exists against this domain from external reputation sources, and it is the decisive negative signal. Two major security vendors also flag the domain, and a separate historical phishing association is recorded. The page itself shows no login form, payment form or hidden form, and the content analysis did not flag brand impersonation. That does not offset the listing, because the domain is a lookalike carrying an established financial brand's name and hosts what appears to be a thin lure-style page. The page promises no returns and solicits nothing directly, but it routes visitors to a third-party document service, a pattern commonly abused to move users toward credential or document capture. The page's runtime behavior adds to the concern. Almost all observed network activity (roughly 99.7%) went to external destinations, and most of it was to unrecognized, non-whitelisted hosts. The page also produced repeated console errors, and its final destination did not match the page it started on. A reCAPTCHA gate was present, which is consistent with either ordinary bot protection or an effort to screen out automated scanners. No conflicting legal entities were found, so there is no identity contradiction. The danger comes from the blacklist and the lookalike-domain pattern. The site should be treated as a potential brand-abuse or phishing vector until proven otherwise. Evidence:

• Homepage: the page title and footer present Swan Bitcoin branding and a 2026 copyright notice, but they sit on a domain that has no independently confirmed link to the brand.
• Homepage: the "Secure document access" and "PDF transcript · DocuSign secured" wording is a self-asserted assurance, and the desktop-only gate redirects the visitor to a third-party document host.
• Browser behavior: 81 external requests were observed, 79 of them to non-whitelisted hosts, with 8 console errors across 3 runs.
• Domain provenance: registered 2026-10-05 (~0.04 years, about 2 weeks old); the web archive holds only 3 snapshots, spanning 2026-10-06 to 2026-10-13 (1 year tracked).

Regulatory Verification Notes

The page carries only Privacy and Terms links and a copyright line. It names no legal entity, registered address, license, regulator or registration number. The business model it implies is a retail exchange or broker-style custody service, which would normally operate under a financial or money-transmission registration. None is claimed or verifiable here, so the operator's identity remains unconfirmed and the registration is shielded by incomplete ownership details. These are transparency gaps, but they matter more here because they accompany a confirmed external listing. No third-party broker or regulatory-database match exists for this domain, so there is no outside reputational record to weigh in either direction. The domain is fresh, the encryption is a basic domain-validated certificate that proves only control of the domain name, and no corporate-validated identity assertion backs the brand. Evidence:

• Homepage footer: Privacy and Terms links and a copyright line are present, with no named company, license, or registry reference.
• Registration: domain registered through NICENIC International Group Co., Limited, created 2026-10-05, expiring 2027-10-05.
• Transport encryption: TLS certificate issued by YE2 (DV), valid to 2027-01-03 (74 days remaining at analysis).
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Before any engagement, confirm through the official Swan Bitcoin website, reached by typing its known address directly rather than following this domain, whether this page and its tax notice actually exist there. If the content cannot be found on the official site, treat this domain as unaffiliated. The tax claims (withholding, the December 31, 2026 specific-lot deadline, Form 1099-DA treatment) should be checked against official tax-authority guidance and the brand's own account communications, not against this page. The DocuSign transcript should not be opened from this site. Any official transcript should instead be requested from the brand's verified support channel. Official support and contact channels should be confirmed independently through the brand's verified site. Organizations should consider reporting the domain to the brand's security team and blocking it at the email and web gateway. Evidence:

• Homepage: the page directs visitors to a DocuSign-hosted transcript that no on-site link or identity statement lets a visitor independently vouch for.
• Homepage: tax figures and the December 31, 2026 deadline are stated without citations to any authority.
• Domain: created about two weeks before analysis, with no established history that could corroborate an affiliation.

Summary Verdict

The available evidence points to a high-risk posture. A confirmed external listing, a very young domain, unverified operator identity and unusual external-traffic behavior converge on one conclusion. Whatever legitimacy the Swan Bitcoin branding suggests is unproven, and the site's technical hygiene does not offset the reputational finding.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All four observed addresses are edge servers and the origin was not observable, so the real hosting location cannot be independently verified, and edge-only visibility can mask rapid content swaps. The provider is a reputable one and the certificate is valid, which are mitigating factors only. They do not establish legitimacy and cannot offset the confirmed external listing.

Closing Assessment

The site should be used, at most, for passive viewing in an isolated environment. Credentials, personal or tax data, document signing and payments must not be entered or submitted through it. Any tax or account matter should be handled only through channels reached independently on the official brand's website.