kyberswapsss[.]pages[.]dev

The domain kyberswapsss.pages.dev is a generic phishing site targeting cryptocurrency users. It poses an elevated risk by attempting to deceive victims into disclosing sensitive information or transferring digital assets, though it does not impersonate a specific brand or utilize a known drainer kit. As of the latest verification, kyberswapsss.pages.dev has been taken offline.

Technical indicators confirm the domain's malicious intent. kyberswapsss.pages.dev was flagged by 2 of 95 security vendors on VirusTotal, including G-Data and Gridinsoft, and appears on 2 security blocklists (PhishDestroy and ScamSniffer). Registered through Cloudflare, Inc. on January 10, 2025, the domain resolves to the IP address 172.66.44.140, hosted by Cloudflare, Inc. (AS13335) in the US. The SSL certificate is issued by Google Trust Services / WE1, and the observed page title was 'Worker threw exception | kyberswapsss.pages.dev | Cloudflare'. Technologies detected include HSTS, Cloudflare, and HTTP/3, with nameservers rita.ns.cloudflare.com and lakas.ns.cloudflare.com.

Users who interacted with kyberswapsss.pages.dev should immediately revoke any token approvals and transfer remaining funds to a new wallet. Enable two-factor authentication (2FA) on all accounts and monitor for unauthorized transactions. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in mitigation efforts.