swiscodelivery[.]com

swiscodelivery.com is a newly registered domain (created 11 Mar 2026) that has been classified as a delivery‑scam infrastructure with a high risk rating. The domain resolves to the IPv4 address 79.133.41.61, which belongs to AS214036 (Ultahost, Inc.) and is geolocated in Germany. Authoritative name servers ns1‑ns4.ultahost.com are all hosted by Ultahost, confirming the registration provider. The site serves HTTP 200 responses over TLS using a Let's Encrypt R13 certificate and supports HTTP/3. Detected web‑stack components include Bootstrap, LiteSpeed, Smartsupp, OWL Carousel, jQuery, Popper, and the HTTP/3 protocol, indicating a typical modern web application framework. Passive monitoring shows the domain is currently active and has been added to a single security blocklist; PhishDestroy has already blocked it. The Gridinsoft trust score is 0 / 100, and VirusTotal reports that 2 of 95 scanners flag the domain, suggesting the presence of malicious indicators. The page title returned by the server is “Home”, but no further content analysis is available. Analysis indicates that the infrastructure is deliberately provisioned for a delivery‑related scam, leveraging a legitimate‑looking hosting environment and common front‑end libraries to evade casual inspection. The lack of publicly disclosed payload or phishing pages limits attribution of specific victim‑targeting techniques, but the combination of a recent registration, low trust score, and early blocklist inclusion warrants immediate defensive action. Defenders should add 79.133.41.61 and swiscodelivery.com to network deny lists, enforce TLS inspection for outbound connections, and monitor DNS queries for the domain. Continuous re‑scanning on VirusTotal and other sandboxes is advised to capture any evolving payloads. Incident response teams should treat any credential or payment data submitted to this site as potentially compromised.