swissborgloginus[.]webflow[.]io

PhishDestroy has identified swissborgloginus.webflow.io as a credential phishing domain that impersonates SwissBorg, a cryptocurrency wealth management platform. The site was designed to steal login credentials by presenting a fake 'Crypto Wealth Management Made Easy : SwissBorg Login' page, luring victims into entering sensitive information. This threat falls under the category of brand impersonation coupled with credential theft, specifically targeting users of the SwissBorg service.

Technical analysis reveals that the domain resolves to IP address 172.64.151.8 and was registered through Cloudflare, Inc. on March 02, 2026. It holds an SSL certificate from Google Trust Services (WE1) and appears on one security blocklist. VirusTotal scanning shows that 15 out of 95 security vendors flag this domain as malicious, indicating a moderate level of detection across the security community. The domain is currently offline, suggesting that it has been taken down or is no longer actively serving the phishing page.

Given that the domain is now offline, the immediate risk of credential theft is reduced, but users who may have already interacted with the site should change their SwissBorg passwords and enable two-factor authentication. PhishDestroy recommends that all users remain vigilant against similar phishing attempts and verify URLs before entering credentials. The domain's brief active period and its presence on security blocklists underscore the importance of using threat intelligence to preemptively identify and block such threats.