sw[.]run

The domain sw.run has been identified as a potential phishing threat. This means it was designed to trick visitors into revealing sensitive information, such as login credentials or financial details, by masquerading as a legitimate website. The site's page title, 'Just a moment...', is a common tactic used by phishing sites to appear as a loading screen while malicious activity occurs in the background. Although the domain is currently offline, its previous activity poses a risk to anyone who may have interacted with it.

PhishDestroy's analysis shows that 6 out of 95 security vendors on VirusTotal flagged this domain as malicious, indicating a significant level of concern within the cybersecurity community. The domain was created on May 31, 2023, through NameCheap, Inc., a registrar sometimes abused by threat actors due to its affordable pricing and privacy options. Additionally, the domain appears on one security blocklist and has been linked to two threat intelligence pulses on AlienVault OTX, further confirming its association with malicious campaigns. The SSL certificate was issued by Google Trust Services, which is a legitimate certificate authority but does not guarantee the safety of the site itself.

If you visited sw.run, you should take immediate action to protect yourself. Change any passwords you may have entered on the site, monitor your financial accounts for unauthorized activity, and run a full security scan on your device using reputable antivirus software. It is also advisable to enable two-factor authentication on important accounts to add an extra layer of security. PhishDestroy recommends staying vigilant against similar threats and always verifying the legitimacy of websites before providing personal information.