This domain is used to host deceptive login pages designed to steal user credentials for social media platforms like Instagram.
- Specialization
- phishing credential harvesting
- Registered
- Nov 4, 2025
sw12aa.org
Analyzed 1 day ago
Potentially Malicious Unranked
0 /100
ScoreDomain Age
8 Months
Tranco Rank
Unranked
Hosting Provider
Private Layer INC
Threat History
Issues Found
Community Votes
Rate this domain:
AI Analyst Classification
Security Considerations
This domain has limited reputation data. Combined with these platform capabilities, exercise caution.
Security Note: Exercise caution. Verify the legitimacy of all content and requests.
Technical Analysis
Recent Threat Analysis
URLert analyzed recent scan activity for sw12aa.org and found 1 result.
| Status | Target URL | Type | Time |
|---|---|---|---|
| Dangerous | http://card.sw12aa.org/sing | 1d ago |
Hosting & Network
Historical and current IP address mappings for this domain.
| IP Address / Hosting | Status | Subdomains | Last Seen |
|---|---|---|---|
Hosted by: Private Layer INC (AS51852) | Active | card.sw12aa.org sw12aa.org | 1 hour ago |
Private Layer INC (AS51852)
Active
card.sw12aa.org sw12aa.org
Seen 1 hour ago
Community Intelligence
Discussion Threads
Share Insight
0/20+
Investigate a Link
Received a suspicious link? Paste the full link to investigate.
Frequently Asked Questions About sw12aa.org
sw12aa.org has been classified by URLert as potentially malicious. This domain is not associated with a known legitimate service.
No. sw12aa.org has been classified as potentially malicious by URLert. This domain is not associated with a known legitimate service. Risk factors on this domain: custom subdomains. 1 of 1 recent URLs scanned from this domain were flagged for suspicious or malicious activity.
Something wrong?
Developer API
Integrate Domain Intelligence
Access this classification data programmatically via our API.
GET /api/v1/classify?domain=sw12aa.org
{
"domain": "sw12aa.org",
"confidence": "high",
"category": {
"purpose": "potentially_malicious",
"specialization": "phishing credential harvesting"
},
"identity": {
"headline": "Malicious phishing domain impersonating social media services",
"summary": "This domain is used to host deceptive login pages designed to steal user credentials for social media platforms like Instagram.",
"operator": null,
"parent_entity": null,
"topics": [
"phishing",
"credential theft",
"impersonation",
"malicious",
"fraud"
]
},
"functions": {
"is_ugc_platform": false,
"is_file_host": false,
"is_url_shortener": false,
"is_public_idp": false,
"is_crypto_platform": false,
"allows_user_subdomains": true,
"is_form_builder": false,
"is_document_host": false
},
"facts": {
"registered_date": "2025-11-04T19:34:44.459000Z",
"rank": null,
"hosting_provider": "Private Layer INC"
}
}