swiftnovaxpress[.]live

The domain swiftnovaxpress.live has been identified as hosting a generic phishing threat and is currently offline. This domain appears to be impersonating a brand, presenting itself as Swift Nova Xpress, in an attempt to deceive users. The domain was created on February 21, 2026, and is registered through Sav.com, LLC, resolving to the IP address 172.245.14.131, and has been flagged by 4 of 95 VirusTotal vendors, additionally appearing on 1 security blocklist, indicating a potential risk to users who may have interacted with it.

The indicators of this threat include its recent creation, the use of a Let's Encrypt SSL certificate, and its presence on a security blocklist, all of which suggest that the domain may have been set up with malicious intent. Given that it has been taken offline, it is likely that the phishing campaign has been disrupted, but users who may have provided sensitive information to the site should be cautious and monitor their accounts for any suspicious activity.

As the domain swiftnovaxpress.live is currently offline, the immediate risk has been mitigated, but PhishDestroy recommends that users who may have visited the site exercise caution and review their account activity, and also be vigilant when encountering similar domains in the future, ensuring they verify the authenticity of websites before providing any sensitive information, thus protecting themselves from potential phishing threats.