scfplc[.]com

This domain is flagged as a high-risk brand impersonation phishing site targeting Swiss Capital Finance PLC, a financial entity. Analysis indicates the domain is designed to deceive users into believing they are interacting with a legitimate Swiss financial institution, potentially facilitating credential harvesting or fraudulent transactions. Infrastructure analysis reveals the domain scfplc.com was registered on December 23, 2025, through OwnRegistrar, Inc. It resolves to the IP address 163.61.188.9, hosted on AS153568 (NEW DHAKA HARDWARE) in the United States. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites. VirusTotal detection shows 2 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is actively blocked by PhishDestroy. The page title, 'SCF PLC – Swiss Capital Finance Plc,' directly mimics the branding of the legitimate entity. Mitigation steps for this threat include immediate blocking of the domain and its resolving IP (163.61.188.9) at the network perimeter. Security teams should monitor for any attempts to access this domain within their environments and investigate potential credential exposure or unauthorized transactions linked to it. End-user awareness training should emphasize verifying domain authenticity, particularly for financial institutions, by cross-checking URLs and SSL certificates. Organizations should also review their email and web filtering rules to prevent delivery or access to this domain and similar impersonation attempts.