swarmnetwork[.]world

swarmnetwork.world was observed by multiple security services as a generic phishing site. The domain appears on a single security blocklist and is listed as blocked by the PhishDestroy filtering service. VirusTotal records show that five of ninety‑five scanning engines flagged the domain, indicating partial detection of malicious behavior. Registration details reveal the domain was provisioned through Cloudflare, Inc., and the authoritative nameservers are lady.ns.cloudflare.com and tom.ns.cloudflare.com.

DNS resolution maps the domain to the IPv6 address 2606:4700:3036::ac43:93dd, which belongs to AS13335 operated by Cloudflare in the United States. No TLS certificate was found for the host, suggesting that HTTPS connections are not available. The only visible page element is the title “Et øjeblik …”, which provides no insight into the content or target of the phishing attempt. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the assessment of high risk.

The site’s current status is offline, which may be the result of takedown actions or temporary suspension. Because the underlying content has not been captured, the specific phishing template, credential‑capture mechanisms, or victim targeting remain unknown. Defenders should continue to block the domain at perimeter filters, update any URL‑filtering lists with the observed blocklist entry, and monitor the associated IPv6 address for any resurgence of activity. Additional investigation, such as retrieving archived snapshots or conducting passive DNS monitoring, would be required to clarify the full scope of the phishing campaign.