# swtb.xyz — SUSPICIOUS

> swtb.xyz (registered Sept 26) hosts a fake giveaway scam. 0/95 VirusTotal detections. View the full report now.

## Summary
PhishDestroy identifies swtb.xyz as a live fake-giveaway scam that lures visitors with bogus prizes to steal login credentials and payment data. The site mimics legitimate brand pages, offering “limited-time” cash or crypto rewards to pressure users into entering personal and financial information. Anyone who clicks through is immediately prompted to connect a wallet or log in to a spoofed portal, exposing their assets to theft.  This domain was flagged on September 26, 2025, just days after registration. It is currently served from 188.114.97.3 and uses a Google Trust Services SSL certificate. The site is hosted on infrastructure with zero VirusTotal detections across 95 engines, meaning most endpoint scanners do not yet recognize the threat. Unstoppable Domains Inc. handled the registration, which allows anonymous blockchain-based purchases and complicates takedown efforts. These technical indicators—new domain, clean VT score, and crypto-friendly registrar—are hallmarks of fast-moving giveaway scams designed to harvest credentials before defenses catch up.  If you visited swtb.xyz, immediately disconnect any connected wallets or payment methods. Clear browser cache and cookies related to the site, then run a reputable antivirus scan. Change passwords on any accounts you entered, especially email and crypto exchanges, and enable two-factor authentication everywhere. Report the URL to your security team or the platform it impersonates so the page can be blocked. Stay alert for follow-on phishing emails or SMS messages referencing the same “prize.”

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-09-26 21:36:03
- Registrar: Unstoppable Domains Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/eaee9c3a-21f5-47df-9f80-935895032433
- PhishDestroy: https://phishdestroy.io/domain/swtb.xyz/
- LLM endpoint: https://phishdestroy.io/domain/swtb.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/swtb.xyz/
Last updated: 2026-03-31