swiss-gb[.]com

This domain, swiss-gb.com, is identified as a phishing site impersonating SWISS GLOBAL BANK, a financial institution brand. The site presents a fabricated login interface designed to harvest credentials from unsuspecting users under the guise of legitimate banking services. Analysis of the page title, 'Home - SWISS GLOBAL BANK,' confirms the intent to mimic the official branding of the targeted entity. No evidence of a crypto drainer kit or direct cryptocurrency theft mechanism was observed in the available data, though credential harvesting remains the primary threat vector. Infrastructure analysis reveals multiple technical indicators associated with malicious activity. The domain resolves to the IP address 5.161.255.77 and was registered on February 21, 2024, through Realtime Register B.V. VirusTotal reports that 8 out of 95 security vendors flag this domain as malicious, indicating a moderate level of detection across the security community. The domain appears on one security blocklist and holds a Gridinsoft trust score of 0 out of 100, further corroborating its fraudulent nature. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious sites due to its accessibility and cost-free nature. Google Safe Browsing status is not explicitly provided, but the domain’s presence on blocklists and detection by multiple vendors suggests it was actively flagged prior to takedown. As of the latest assessment, swiss-gb.com has been taken offline, likely following reports from security researchers or automated detection systems. The domain’s removal reduces immediate risk to end users, though residual threats may persist if harvested credentials are exploited in subsequent attacks. Organizations and individuals are advised to monitor for unauthorized access attempts linked to this campaign and implement multi-factor authentication to mitigate credential-based threats. Continuous vigilance and real-time threat intelligence remain critical to detecting and neutralizing similar phishing operations.