pirateswap[.]gr[.]com

This domain, pirateswap.gr.com, is currently active and resolves to the IPv4 address 209.74.82.247, which is geolocated to Singapore and hosted by Namecheap Inc. The domain is registered through Key-Systems GmbH and is served over HTTPS using a Let’s Encrypt YR2 certificate. An HTTP request returns a 302 redirect, and the page title reported by crawlers is “Pirateswap — Official Resource,” suggesting the site attempts to present itself as an official resource for the Pirateswap service. The infrastructure is supported by four centralnic.net nameservers (ns1‑centralnic.net, ns2‑centralnic.net, ns3‑centralnic.net, ns4‑centralnic.net). The domain is listed on three security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis shows that three of ninety‑one scanners flagged the domain as malicious. While the exact malicious payload or credential‑harvesting page has not been publicly disclosed, the combination of redirect behavior, brand‑like title, and inclusion on multiple blocklists indicates a high‑risk phishing campaign targeting users of the Pirateswap ecosystem. Defenders should immediately add pirateswap.gr.com to deny‑list rules, enforce TLS inspection, and monitor for outbound connections to the associated IP. Continuous re‑evaluation is advised as further content analysis becomes available.