swisspost[.]total91637[.]cfd

This domain, swisspost.total91637.cfd, is a fraudulent site designed to impersonate the Swiss postal service Swiss Post. The threat posed is credential theft and financial fraud, as the site likely attempts to trick victims into entering login credentials or payment information under the guise of a legitimate package tracking or delivery notification service.

Technical analysis reveals the domain was created on February 21, 2026, and is hosted on IP address 104.21.76.40, belonging to AS13335 Cloudflare, Inc. in the United States. VirusTotal reports 13 out of 95 security vendors flagged the domain as malicious, with detections from ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, and ESET. The domain is listed on 2 blocklists and uses an SSL certificate identified as WE1.

The site is currently offline or down. Based on a DOM risk score of 73, the domain presents a high risk for phishing and impersonation attacks. Organizations and users should block access to this domain and report any associated phishing attempts.