swiftdigitaltrad[.]com

This domain, swiftdigitaltrad.com, is identified as a credential theft operation designed to harvest login credentials through fraudulent trading platform pages. Analysis indicates the site impersonates legitimate financial services under the guise of "Swift Digital Trade Trading Limited." The domain is currently offline but remains a documented threat in security databases. Infrastructure analysis reveals the domain was registered through Realtime Register B.V. on May 12, 2026, and resolves to the IP address 198.251.84.200. It is flagged by 2 of 95 VirusTotal security vendors and appears on one security blocklist. The site employed a Let's Encrypt SSL certificate and utilized technologies including PHP, Tailwind CSS, LiteSpeed, Alpine.js, Unpkg, Smartsupp, Lightbox, and jsDelivr. Gridinsoft assigned a trust score of 28 out of 100, further indicating malicious intent. The domain has been taken offline, but historical indicators suggest it was actively used for credential harvesting. Organizations and users are advised to block the domain and associated IP address 198.251.84.200 at the network level. Security teams should monitor for any re-registration attempts or similar domains using the same branding. End users who may have interacted with the site should reset credentials for any accounts entered and enable multi-factor authentication where available. Network logs should be reviewed for connections to the domain or IP to identify potential compromise.