solswap[.]one

The domain www.solswap.one is currently active and was registered on June 22, 2026 through Spaceship, Inc. Infrastructure analysis shows that the domain resolves to the IPv4 address 186.2.175.35 and is served by the authoritative name servers launch1.spaceship.net and launch2.spaceship.net. Threat intelligence platforms have classified the site as a generic phishing operation, and it is listed on three security blocklists. Defensive products PhishDestroy, MetaMask, and SEAL have already blocked the domain, indicating that multiple vendor feeds have incorporated the indicator.

VirusTotal reports that four of ninety‑one security scanners flag the domain, providing additional corroboration of malicious intent. No public information is available regarding SSL certificate details, HTTP response codes, or the page title, so the exact content served by the site remains unverified. The limited detection count suggests that the campaign may be in an early deployment phase, but the presence on multiple blocklists and the active block status demonstrate a non‑trivial risk to end users.

Defenders should add 186.2.175.35 to network‑level deny lists, enforce DNS filtering for www.solswap.one, and monitor for any outbound connections to the associated IP range. Continuous re‑inspection of the domain’s web content is recommended to detect any evolution of the phishing payload. Organizations using the blocked products should verify that the existing blocks remain enforced and consider supplemental endpoint rules to mitigate potential credential harvesting attempts.