blazeswap[.]fun

Analysis of blazeswap.fun shows that the domain was registered on 10 July 2026 via the registrar Fewmoretaps OU operating under the Trade Name Trustname.com. The authoritative name servers are ares.trustname.com, zeus.trustname.com, ns1.anycastdns.cz and ns2.anycastdns.cz, indicating use of a mixed DNS infrastructure that includes both Trustname‑managed and anycast services. The domain resolves to the IPv4 address 186.2.175.35; no additional A or AAAA records were observed. The IP belongs to a hosting provider that frequently appears in abuse reports, although the specific ASN or country is not disclosed in the supplied data.

The site has been added to at least one public blocklist and is actively blocked by the PhishDestroy service, confirming that security‑focused feeds consider it malicious. VirusTotal reports show that the domain was scanned by 91 AV engines, none of which raised a detection at the time of analysis. The absence of detections does not constitute a safety guarantee, especially given the presence of other independent indicators. No SSL/TLS certificate information, HTTP response codes, or page‑title metadata are currently available, so the surface‑level web fingerprint cannot be corroborated.

Likewise, Safe Browsing, OTX, or other threat‑intel feeds have not been cited in the supplied intelligence. Given the combination of recent registration, use of a reputable‑looking registrar, deployment of multiple name‑servers, and explicit inclusion on a phishing blocklist, the domain should be treated as a high‑confidence phishing indicator. Defensive operators are advised to add blazeswap.fun to DNS‑sinkhole or firewall deny lists, monitor outbound DNS queries for look‑ups to the listed name‑servers, and consider correlating any traffic to 186.2.175.35 with existing intrusion‑detection signatures. Continuous re‑evaluation is recommended, as further profiling (e.g., TLS inspection or content retrieval) may reveal additional malicious behavior.