borswin[.]com

PhishDestroy identifies borswin.com as an active credential theft domain designed to harvest user login details. This site employs fraudulent forms impersonating legitimate services to trick victims into surrendering sensitive credentials. The domain leverages social engineering tactics, including fake login pages and misleading prompts, to capture usernames and passwords for subsequent exploitation in identity theft or unauthorized account access. This domain was flagged by PhishDestroy with confirmed indicators of compromise. VirusTotal analysis shows only 2 out of 95 security vendors currently detect the threat, indicating low initial detection rates. The domain resolves to IP address 104.21.94.180 and uses a Let’s Encrypt SSL certificate to appear legitimate. Registration was processed through Fewmoretaps OU d/b/a Trustname.com on April 25, 2026, a recently created domain with minimal age and elevated risk characteristics. Users who visited borswin.com should assume their credentials may have been compromised. Immediately change passwords for any accounts entered on this domain, enable multi-factor authentication (MFA) where available, and monitor accounts for unauthorized activity. Avoid reusing passwords across services and run a security scan on any device that accessed this site. Report the domain to your security team or platform provider. If fraudulent activity occurs, file a complaint with local law enforcement and relevant cybercrime units.