britswifttrade[.]com

BritSwiftTrade.com is currently listed as an active generic phishing domain with a high risk rating. The domain was registered on December 03, 2022 through OwnRegistrar, Inc. and uses the authoritative name servers ns1.zunxoo.com and ns2.zunxoo.com. DNS resolution points to the IPv4 address 158.220.124.22, which is the sole hosting endpoint observed for this campaign. The domain appears on one security blocklist and has been blocked by the PhishDestroy service, indicating that at least some network‑level defenses are already filtering traffic to it.

VirusTotal analysis shows that 12 of 91 security vendors have flagged the domain, reinforcing the suspicion of malicious use. The available intelligence does not include SSL certificate details, HTTP response codes, or page‑title content, so the exact nature of the landing page remains unverified. Consequently, defenders cannot confirm which credential‑capture techniques are employed, nor can they identify any additional infrastructure that may be shared with other campaigns.

Given the high risk classification, organizations should proactively block traffic to 158.220.124.22 and to the domain britswifttrade.com at the DNS or firewall level, monitor outbound connections for attempts to reach the host, and consider adding the domain to internal blocklists. Continuous monitoring of VirusTotal and other reputation services is recommended to capture any future changes in detection counts or additional blocklist listings. Analysts should also seek to retrieve the page content through a sandboxed environment to determine the specific phishing vector and to support attribution efforts.