swisborg-logiapp[.]webflow[.]io

PhishDestroy investigated swisborg-logiapp.webflow.io, a generic phishing domain impersonating the SwissBorg cryptocurrency platform. The site was designed to harvest login credentials from users seeking to invest in crypto assets, as indicated by its page title 'SwissBorg Login | Invest In Crypto Asset'. No specific drainer kit was identified, but the threat remains significant due to the brand abuse.

Technical indicators reveal that the domain was flagged by 15 out of 95 security vendors on VirusTotal, placing it in the elevated risk category. It was registered through MarkMonitor Inc. and resolved to IP address 172.64.151.8. The domain was created on May 08, 2013, and appears on one security blocklist. The SSL certificate was issued by Google Trust Services (WE1), but Google Safe Browsing status is not explicitly stated, though the domain was taken offline.

The domain is currently offline, indicating that response actions have been taken to mitigate the threat. However, users should remain vigilant as similar phishing campaigns may emerge. Recommendations include never entering credentials on such sites, verifying URLs through official channels, and reporting suspicious domains to security teams. Continued monitoring is advised due to the elevated risk and brand impersonation involved.