swissboorglogi[.]webflow[.]io

This domain, swissboorglogi.webflow.io, is identified as a fraudulent cryptocurrency login portal impersonating SwissBorg, a legitimate crypto wealth management platform. Analysis indicates the site was designed to harvest user credentials under the guise of a legitimate SwissBorg account sign-in page, as evidenced by the page title 'SwissBorg Login - Sign In SwissBorg Account Crypto | SwissBorg.' No direct evidence of a crypto drainer script was observed, but the site aligns with credential phishing tactics targeting cryptocurrency users. Infrastructure analysis reveals the domain was registered through NameCheap, Inc. on February 21, 2026, an anomalous future date suggesting potential manipulation or misconfiguration. The domain resolves to IP address 104.18.36.248, hosted on AS13335 Cloudflare, Inc., a common provider for both legitimate and malicious sites. VirusTotal detection metrics show 16 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and was blocked by Google Safe Browsing (GSB) mechanisms. The SSL certificate is issued by Google Trust Services (WE1), a standard but non-indicative factor in this context. The domain is currently offline, reducing immediate risk to end users. However, residual risk remains due to potential credential reuse by victims or reactivation of the infrastructure under a different domain. Response actions should include monitoring for related domains registered through the same registrar or resolving to the same IP range. Users who interacted with the site are advised to reset credentials on legitimate SwissBorg platforms and enable multi-factor authentication. Organizations should update blocklists to include this domain and associated indicators of compromise (IOCs) to prevent future access attempts.