# app.hyperswap.exchange.mypcpwallet.com — MALICIOUS

> app.hyperswap.exchange.mypcpwallet.com is linked to crypto drainer activity. Learn about its risks and stay protected with PhishDestroy insights.

## Summary
PhishDestroy identifies app.hyperswap.exchange.mypcpwallet.com as a medium-risk crypto drainer domain. This threat is designed to illicitly access and drain cryptocurrency wallets by masquerading as a legitimate service, potentially deceiving users into revealing private keys or seed phrases. Its classification as a crypto drainer underscores the financial danger it poses to unsuspecting victims in the cryptocurrency ecosystem.

The domain was registered on February 21, 2026, but is currently categorized as a dead domain. It has appeared on two distinct security blocklists and has been flagged by several security vendors on VirusTotal, indicating community consensus on its malicious intent. The domain was likely part of a broader phishing infrastructure aimed at exploiting users of crypto exchange or wallet services by using a deceptive subdomain structure to appear legitimate.

At present, app.hyperswap.exchange.mypcpwallet.com is offline, which reduces immediate risk. However, users and organizations are advised to remain vigilant and avoid interacting with suspicious domains, especially those imitating well-known crypto platforms. PhishDestroy recommends routine verification of domain reputations before engaging with crypto-related websites and maintaining updated security solutions to prevent similar threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: mypcpwallet.com | 521: Web server is down

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: MAT BAO CORPORATION
- Country: VN
- IP: 172.67.198.133
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["kallie.ns.cloudflare.com", "kyle.ns.cloudflare.com"]
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "ScamSniffer"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01985f0f-0a3f-7739-a322-82f1aaf7c351.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/f28228c8-1b37-48b5-af8b-a2552fccf74b
- PhishDestroy: https://phishdestroy.io/domain/app.hyperswap.exchange.mypcpwallet.com/
- LLM endpoint: https://phishdestroy.io/domain/app.hyperswap.exchange.mypcpwallet.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/app.hyperswap.exchange.mypcpwallet.com/
Last updated: 2026-03-19