swiftairwaydeliveries[.]com

PhishDestroy identifies swiftairwaydeliveries.com as a crypto drainer phishing domain actively impersonating SwiftAirways to trick users into connecting cryptocurrency wallets and stealing funds. The site leverages deceptive branding to appear legitimate, likely mimicking the real SwiftAirways to exploit victim trust. No specific drainer kit signatures (e.g., Etherscan-reported drain scripts) are publicly noted yet, but behavioral indicators suggest on-chain fund extraction mechanisms upon wallet connection.

swiftairwaydeliveries.com resolves to IP 163.61.188.5 and was registered on May 25, 2024 via NameSilo, LLC. It holds a valid Let's Encrypt SSL certificate (no self-signed anomalies). VirusTotal currently reports 1/95 detection engines flagging the domain—indicating it has not yet been widely blacklisted. As of this report, it remains unlisted in Google Safe Browsing (GSB) and has 0 entries across major threat intelligence blocklists like PhishTank or OpenPhish.

This domain is classified as active with a risk level under investigation by domain safety watchdogs. Users are advised to block traffic to 163.61.188.5 and report the domain to hosting providers and registrars. While the immediate threat is unconfirmed due to low detection rates, the combination of fresh registration, impersonation branding, and crypto context demands extreme caution. Remaining risk: high until wider threat intelligence coverage is achieved.