swissborgllogin[.]webflow[.]io

PhishDestroy identifies swissborgllogin.webflow.io as an active credential phishing domain impersonating the SwissBorg brand. The threat type is credential phishing, targeting users by presenting a fake login portal designed to steal sensitive account credentials. There is no indication of an associated crypto drainer kit, but the impersonation of SwissBorg aims to deceive victims into providing access to their cryptocurrency accounts.

From a technical standpoint, swissborgllogin.webflow.io currently has a VirusTotal detection score of 18 out of 95, meaning it is not yet flagged by antivirus or URL scanning engines. The domain resolves to the IP address 172.64.151.8 and uses an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy. The domain is hosted on the Webflow platform, a common choice for phishing sites due to ease of setup. At this time, there is no known blocklist detection or Google Safe Browsing warnings. The registrar information and domain creation date were not provided, which are relevant for further investigation.

The domain remains under active investigation with the risk level classified as under_investigation. PhishDestroy recommends users remain cautious and avoid entering any credentials on this website. Security teams should monitor for potential updates in detection signatures and block the domain at network perimeters as a precaution. The lack of VirusTotal detections suggests this phishing campaign is still emerging, posing a risk to unaware SwissBorg users. Verification on trusted intelligence platforms is advised before interacting with the domain.