# swiftspiretalnor.com — SUSPICIOUS

> SwiftspireTalnor.com was flagged for crypto drainer activity. Currently offline with low risk but listed on a security blocklist. Learn more here.

## Summary
PhishDestroy identifies swiftspiretalnor.com as a low-risk crypto drainer domain currently taken offline. Despite its seemingly legitimate page title promoting AI-driven trading, the domain's threat level remains low due to limited active malicious activity.

Evidence includes its creation date set in the future (2026-02-21), registration via Metaregistrar BV, and IP resolution to 104.21.24.70. The domain is flagged by 2 security vendors and appears on one blocklist, suggesting some suspicion but limited reach or impact. Its current offline status reduces immediate danger to users.

To mitigate risks, users should avoid interacting with this domain or any communications referencing it. Security teams should monitor any resurfacing activity and ensure blocklists are updated. Maintaining updated endpoint protections further minimizes exposure to potential crypto draining threats linked to such sites.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Swiftspire Talnor - Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Expires: 2026-12-10 00:00:00
- Registrar: Metaregistrar BV
- Country: NL
- IP: 104.21.24.70
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: curt.ns.cloudflare.com gigi.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019b9722-910d-72ba-abb8-05fd68d41e4e.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/af31850b-7133-4038-a466-f6eaeabffd36
- PhishDestroy: https://phishdestroy.io/domain/swiftspiretalnor.com/
- LLM endpoint: https://phishdestroy.io/domain/swiftspiretalnor.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/swiftspiretalnor.com/
Last updated: 2026-03-19