# svwvhyft.top — MALICIOUS

> svwvhyft.top is a credential harvesting scam site distributing fake downloads. 14 security vendors flagged it; check the full report.

## Summary
PhishDestroy identifies svwvhyft.top as a live credential-harvesting scam hosting a page titled “Download” to trick users into surrendering sensitive login details.

This domain was flagged by Google Safe Browsing for SOCIAL_ENGINEERING, blocked by InversionDNS, and blacklisted on one additional security source. VirusTotal analysis shows 14 out of 95 vendors currently detecting malicious content. The domain was registered on July 31 2025 through NameSilo LLC, resolves to IP 188.114.96.3, and uses a Google Trust Services SSL certificate to appear legitimate.

To mitigate credential-harvesting risks, avoid entering any login credentials on this site. If you already submitted information, change passwords immediately and enable two-factor authentication on all linked accounts. Report the domain to your antivirus provider and browser vendor to help block future access.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Page title: Download

## Domain Intelligence
- Registered: 2025-07-31 15:08:11
- Registrar: NameSilo, LLC
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 14 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 1 hits
  Lists: ["InversionDNS"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a3d0df28-e6d8-436f-bfc2-f6b6c9f4d2d5
- PhishDestroy: https://phishdestroy.io/domain/svwvhyft.top/
- LLM endpoint: https://phishdestroy.io/domain/svwvhyft.top/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/svwvhyft.top/
Last updated: 2026-03-25