# kvadux.sbs — SUSPICIOUS

> kvadux.sbs exposed as a phishing site with 0/95 VirusTotal detections. Verify and block this active threat now. Check the full report.

## Summary
PhishDestroy identifies kvadux.sbs as a recently activated phishing domain designed to deceive users into divulging sensitive information under false pretenses. This domain mimics legitimate services to harvest credentials or financial data, posing an immediate risk to unsuspecting visitors. The threat is classified as a credential harvesting phishing attempt, leveraging social engineering tactics to exploit trust in recognizable brand interfaces or service providers.


This domain exhibits multiple red flags confirmed by forensic analysis. kvadux.sbs was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and went live on April 02, 2026, a suspiciously recent creation date for a site claiming legitimacy. It resolves to IP address 104.21.36.154 and currently shows 0 detections out of 95 scans on VirusTotal, indicating it remains undetected by most antivirus engines despite its active deployment. The use of a Google Trust Services SSL certificate adds a superficial layer of legitimacy, misleading users into believing the site is secure.


Users who visited kvadux.sbs are strongly advised to take immediate precautions. Do not enter any login credentials, payment details, or personal information on this domain. If you have already interacted with the site, change passwords for any accounts you may have used there and enable multi-factor authentication where possible. Report the domain to your IT security team or use a trusted domain reputation tool to verify its status. Block this domain at the network level to prevent further access and avoid potential data compromise. Stay vigilant and verify URLs before clicking to prevent falling victim to this credential harvesting attack.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-02 02:43:08
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.36.154

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/kvadux.sbs
- PhishDestroy: https://phishdestroy.io/domain/kvadux.sbs/
- LLM endpoint: https://phishdestroy.io/domain/kvadux.sbs/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kvadux.sbs/
Last updated: 2026-04-04