swissbased[.]shop

This domain, swissbased.shop, is actively impersonating American Express as part of a brand impersonation campaign. Registered through Shopify's infrastructure (ASN: 13335), it resolves to 23.227.38.65 and is currently flagged on two security blocklists, including PhishDestroy and BLP-Malware. The page title, 'SWISS BASED | Tallow Hautpflege 100% Schweizer Qualität – Swiss Based,' does not align with financial services, suggesting either a cloaked landing page or a misdirection tactic. Analysis indicates the use of Shopify's platform alongside third-party libraries (Unpkg, jQuery, Glider.js) and tracking tools (Google Analytics, Klaviyo), which are consistent with e-commerce or phishing kit deployments. The SSL certificate is issued by Let's Encrypt, a common but not exclusive indicator of legitimacy. AlienVault OTX records show the domain in 23 threat intelligence pulses, reinforcing its association with malicious activity. Defenders should treat this domain as high-risk, block resolution at the DNS level, and monitor for related subdomains or IP-based connections. The exact content of the site remains unanalyzed, so further investigation into payload delivery or credential harvesting mechanisms is recommended. No evidence of takedown or sinkholing has been observed as of July 12, 2026.