swiisspaasskunnto[.]jdevcloud[.]com

The domain swiisspaasskunnto.jdevcloud.com is currently listed as an active phishing infrastructure with an elevated risk rating. Automated scans by VirusTotal have recorded detections from five out of ninety‑one security vendors, indicating that multiple AV engines have identified malicious behavior associated with the host. Independent threat‑intel feed PhishDestroy has actively blocked the domain, and it also appears on a single external security blocklist, reinforcing the consensus that the site is being used for credential‑harvesting or related fraudulent activity.

No public registration details, hosting IP, or SSL certificate information are presently available in the shared intelligence, so attribution of the underlying infrastructure remains uncertain. Likewise, the page title, brand targeting, and specific phishing kit have not been disclosed, limiting the ability to map the exact victim profile or lure employed. Despite these gaps, the convergence of vendor detections, blocklist inclusion, and active mitigation by PhishDestroy provides sufficient confidence to treat the domain as malicious.

Defenders should immediately add swiisspaasskunnto.jdevcloud.com to outbound and inbound web filtering policies, ensure that any existing DNS or proxy blocks reference the domain, and monitor for related indicators such as newly observed sub‑domains under the jdevcloud.com parent zone. Incident response teams should also review recent authentication attempts from internal users for possible credential leakage and consider password resets where exposure is suspected. Ongoing observation of threat‑intel feeds for additional detections or expanded blocklist listings is advised to maintain coverage as the actor’s infrastructure evolves.