Analysis of theswoge.info, observed on 2026-07-30, indicates that the domain is actively being used for a generic phishing campaign. The domain was registered on 2026-07-27 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is served by Cloudflare nameservers hazel.ns.cloudflare.com and lex.ns.cloudflare.com. DNS resolution points to the IPv4 address 188.114.97.3.
The host is listed on three independent security blocklists and is currently blocked by PhishDestroy, MetaMask, and SEAL, confirming that multiple threat-intelligence feeds have identified malicious use. VirusTotal records show that the domain was submitted to 91 scanning engines; at the time of analysis none of the engines reported a detection, but this absence of alerts does not constitute evidence of legitimacy. No additional data such as SSL certificate details, HTTP response codes, or page-title information are available in the supplied intelligence, leaving the exact content of the site unverified.
The combination of recent registration, Cloudflare hosting, blocklist presence, and the designation of a generic phishing threat suggests a high-risk profile. Defenders should add the domain to inbound and outbound filtering rules, monitor DNS queries for the associated IP address, and consider proactive blocking at the network perimeter. Ongoing observation is recommended to capture any changes in detection status or additional intelligence that may emerge.