flareswap[.]fun

The domain flareswap.fun was registered on July 17, 2026 and is currently flagged as a generic phishing site under investigation. Infrastructure analysis shows the domain resolves to the IPv4 address 186.2.175.35 and is served by four authoritative nameservers: ares.trustname.com, zeus.trustname.com, ns1.anycastdns.cz and ns2.anycastdns.cz. The registrar entry lists Fewmoretaps OU d/b/a Trustname.com as the registering organization.

The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that at least one external mitigation platform has taken action against it. VirusTotal has processed the domain with 91 antivirus and URL‑reputation engines, and none of the engines reported a detection at the time of the scan; this absence of detections does not constitute a safety guarantee. No additional public data such as SSL certificate details, HTTP response codes, or page title information is presently available, leaving the exact content and phishing vector unconfirmed.

Given the recent creation date, the association with known phishing‑related nameservers, and the active blocklist status, defenders should treat the domain as malicious until further evidence suggests otherwise. Recommended mitigation steps include adding flareswap.fun and its resolved IP address 186.2.175.35 to network denylists, configuring DNS filtering to block the listed nameservers, and monitoring for any future activity in threat‑intel feeds. Continuous re‑scanning on platforms such as VirusTotal and periodic WHOIS checks are advised to capture any changes to registration or hosting that could affect risk posture.