miamiswift[.]com

Analysis of miamiswift.com indicates that the domain was created on 21 February 2026 and is currently taken offline. The site presented a page title of "1 new message", which aligns with the reported generic phishing threat. Technical fingerprinting shows the server runs PHP on LiteSpeed and is hosted on IP 162.254.39.103, an address assigned to AS22612 (Namecheap, Inc.) in the United States. The domain uses a Sectigo Limited / Sectigo Public Server Authentication CA DV R36 certificate, confirming TLS is in place despite the offline status. DNS resolution is handled by dns1.namecheaphosting.com and dns2.namecheaphosting.com, both Namecheap name‑servers.

Reputation data reveal that the domain appears on three security blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scanned the host and recorded 2 detections out of 93 security vendors, indicating partial malicious classification. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the elevated risk profile. The registrar is NameCheap, Inc., matching the hosting provider.

Uncertainties remain regarding the specific content served before takedown, as no visual or payload details are available beyond the page title. No additional intelligence such as OTX identifiers or Safe Browsing verdicts was provided. Defenders should continue to block the domain at perimeter and DNS layers, monitor the associated IP for any re‑activation, and incorporate the host into threat‑intel feeds. Ongoing observation of the three blocklists for potential updates is recommended, as is re‑scanning with additional sandbox services if the site reappears.