claim[.]switchboard[.]sbs

The domain claim.switchboard.sbs is a phishing site engaged in brand impersonation, specifically targeting Apple users with a cryptocurrency scam. This site was designed to deceive victims into believing they were interacting with a legitimate Apple service, likely to steal cryptocurrency or sensitive information. As of the latest verification, claim.switchboard.sbs has been taken offline, but it remains under investigation for its prior malicious activity.

Technical indicators show that claim.switchboard.sbs had 0 of 95 VirusTotal vendors flagging it as malicious, and Google Safe Browsing did not list it as a threat. The domain appeared on 1 security blocklist (PhishDestroy) and was registered through Web Commerce Communications Limited on September 11, 2025. It resolved to the IP address 162.159.140.229, hosted by Cloudflare in the US (AS13335), with no SSL certificate issued. The observed page title was 'X. Alles, was gerade los ist / X', and the domain used Cloudflare nameservers (amit.ns.cloudflare.com and sandra.ns.cloudflare.com). Gridinsoft assigned it a trust score of 0/100.

Individuals who interacted with claim.switchboard.sbs should take immediate safety steps. If cryptocurrency was involved, revoke any token approvals granted to the site and transfer remaining funds to a new wallet. For potential credential exposure, change passwords on all accounts where the same credentials may have been reused, enable two-factor authentication, and monitor for unauthorized transactions or account activity. Report the domain to platforms like PhishTank, Google Safe Browsing, or local cybercrime authorities to aid in broader mitigation efforts.