swap[.]spikey[.]fun

swap.spikey.fun is a phishing domain currently under investigation, posing as a Google Trust Services entity to deceive users into divulging sensitive information. The domain is actively operational and was created on May 08, 2025, with a false SSL certificate issued by Google Trust Services to enhance its credibility. PhishDestroy has identified this threat as part of a broader campaign targeting unsuspecting users by exploiting legitimate-looking domains. This domain was flagged by 1 of 95 VirusTotal vendors, indicating a lack of immediate detection despite its malicious intent. It is registered through NAMECHEAP INC, resolves to IP address 172.67.181.128, and was created on May 08, 2025. The absence of detections on VirusTotal, combined with the use of a Google Trust Services SSL certificate, suggests a sophisticated attempt to bypass traditional security measures. The domain has not yet been added to major blocklists, further increasing its potential reach and harm. Users are strongly advised to avoid interacting with swap.spikey.fun or any associated links, as it poses a significant risk of credential theft and financial fraud. Immediate actions include blocking the domain at the network level, reporting it to security vendors like VirusTotal, and warning others about this threat. Organizations should update their threat intelligence feeds to include this domain and monitor for any related infrastructure. Proactive measures, such as user awareness training and DNS filtering, are critical to mitigating the risks associated with this phishing campaign.