Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@estoxy.com.
The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
optswiftonline[.]online
“Home - Opt Swift”
PhishDestroy identifies optswiftonline.online as an active credit card phishing domain designed to steal payment details from unsuspecting users. The site mimics legitimate financial portals to trick visitors into entering sensitive card information, which is then harvested for fraudulent transactions. This domain was flagged by security vendors due to its deceptive design and malicious intent, requiring immediate caution from potential victims. This domain was flagged after security analysis revealed alarming indicators. It was registered on May 09, 2026, through Global Domain Group LLC, a registrar often exploited by cybercriminals for short-lived malicious domains. VirusTotal reports that only 1 out of 95 security vendors currently detect this threat, illustrating the stealthy nature of the phishing operation. The site uses a Let's Encrypt SSL certificate to appear legitimate and resolves to IP address 37.49.229.75, a hosting infrastructure linked to multiple fraudulent campaigns. If you visited optswiftonline.online, avoid entering any personal or financial information immediately. Disconnect from the site and scan your device for malware using a trusted antivirus tool. Consider changing passwords for critical accounts and monitoring bank statements for unauthorized transactions. Report the domain to your cybersecurity team or local authorities to help prevent further victimization. Stay vigilant—phishing sites like this evolve rapidly, and even recently registered domains can pose significant risks.
Network Security Intelligence
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 5 identified
JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com 100% confidenceHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% confidenceVirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of optswiftonline.online · checked May 10, 2026
Evidence & External Reports
PD-20260510-B0361A Recipient: abuse@estoxy.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive