# kyberswap.us — SUSPICIOUS

> kyberswap.us is an active phishing domain flagged on multiple blocklists. Avoid interaction and stay protected. Learn more on PhishDestroy.

## Summary
PhishDestroy identifies kyberswap.us as an active phishing domain presenting a low-level risk to internet users. Although the threat is categorized as low, the domain is still operational and can potentially deceive users into divulging sensitive information. Users should remain vigilant and avoid engaging with this domain, as phishing sites often mimic legitimate services to lure victims.

This phishing campaign operates by impersonating trusted cryptocurrency platforms or financial services, attempting to trick visitors into submitting personal credentials or payment data. The domain was registered recently and has been flagged by several security blocklists, indicating suspicious activity. Users encountering kyberswap.us may receive unsolicited messages or be redirected from other sites, increasing the likelihood of accidental exposure.

If a user has visited kyberswap.us, it is recommended to immediately cease any interaction and run a comprehensive antivirus and malware scan on their device. Changing passwords associated with cryptocurrency or financial accounts is also prudent. Users should report suspicious activity to their security teams or use platforms like PhishDestroy to stay informed and prevent further compromise.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Google

## Domain Intelligence
- Registered: 2026-02-21 07:01:08

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["CRDF", "Gridinsoft"]
- Google Safe Browsing: clean
- Blocklists: 4 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "SEAL"]

## Live Page Content

### Page Text
https://google.com/ About this page Our systems have detected unusual traffic from your computer network.  This page checks to see if it's really you sending the requests, and not a robot. Why did this happen? This page appears when Google automatically detects requests coming from your computer network which appear to be in violation of the Terms of Service . The block will expire shortly after those requests stop.  In the meantime, solving the above CAPTCHA will let you continue to use our services. This traffic may have been sent by malicious software, a browser plug-in, or a script that sends automated requests.  If you share your network connection, ask your administrator for help — a different computer using the same IP address may be responsible. Learn more Sometimes you may be asked to solve the CAPTCHA if you are using advanced terms that robots are known to use, or sending requests very quickly. IP address: 104.28.161.18 Time: 2026-03-14T19:42:11Z URL: https://google.com/

### External Scripts
- https://www.google.com/recaptcha/enterprise.js

### Form Fields
- q
- continue
- hidden

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a0ecda27-f172-43ad-9852-de53e877bdad
- PhishDestroy: https://phishdestroy.io/domain/kyberswap.us/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kyberswap.us/
Last updated: 2026-03-14