Flap Migrates Domain to Address Security Risks
The company urges users to switch to flap.cool following the detection of abnormal redirects on its original domain.
Updated on Oct. 31, 2026 in Internet

Live Poll
Do you trust online platforms to adequately protect your wallet data during domain security incidents?
Flap has migrated its official website from flap.sh to flap.cool following the detection of abnormal redirects on its original domain. The company is advising all users to avoid using the old domain for wallet connections and transactions while it investigates potential DNS attacks.
Why it matters
This move highlights the security risks inherent in DNS management, where domain redirection attacks can be leveraged to hijack user traffic. By formally abandoning the .sh domain, the company is attempting to mitigate the risk of financial asset loss during ongoing security inquiries.
The transition moves traffic from the flap.sh domain to the flap.cool domain to circumvent unauthorized redirects. The company is currently investigating the technical link between its domain service provider and the observed DNS (Domain Name System) attacks.
The players
Flap
A web platform that facilitates digital wallet connections and user transactions.
The details
The migration process utilizes standard URL redirection, where requests to the legacy domain are forwarded to the new address to prevent users from interacting with potentially compromised endpoints. DNS attacks involve the manipulation of the records that link human-readable domains to server IP addresses, allowing attackers to divert traffic to malicious sites without the user's knowledge.
Timeline
October 31, 2026: Official notice published regarding the domain migration.
The Tech Race
The move aligns with broader industry efforts to harden domain infrastructure against DNS-level exploitation. It mirrors security responses to the 2020 Twitter DNS hijacking incident, highlighting the persistent vulnerability of domain management services.
Users must immediately cease using flap.sh for all wallet connections and transactions to prevent potential security compromises. All official traffic is now routed exclusively through flap.cool, which is the only verified entry point for the platform.
The takeaway
The platform's shift demonstrates the necessity of proactive domain management when security protocols are compromised by external DNS actors. Users should monitor for future official communications regarding the completion of the provider investigation to ensure long-term account safety.
Further reading
For broader trends in domain infrastructure security, explore our coverage of Internet.
Source note: This article includes information reported by TokenPost.
Live Poll
Do you trust online platforms to adequately protect your wallet data during domain security incidents?






