app[.]kyberwsap[.]bond

Analysis as of July 23 2026 indicates that the domain app.kyberwsap.bond is currently offline but continues to be flagged by multiple security sources. The domain resolves to the Cloudflare IP address 172.67.180.68, which is hosted in the United States under ASN 13335. The TLS certificate presented is identified as “WE1”, matching typical Cloudflare‑issued certificates. The HTTP response returns a generic “Index of /” page title, providing no functional content.

Reputation services assign extremely low trust scores: Scamadviser rates the site 1 / 100 and Gridinsoft 0 / 100. The domain appears on a single public blocklist and is specifically blocked by the PhishDestroy service. VirusTotal analysis shows that 12 of 93 scanning engines flag the domain, reinforcing the malicious assessment. Registration metadata shows the domain was created on 21 February 2026, suggesting a recent deployment consistent with a short‑lived phishing campaign.

No additional indicators such as safe‑browsing warnings, OTX signatures, or known phishing kits were observed. Given the convergence of low reputation scores, multiple vendor detections, and active blocklisting, defenders should treat any traffic to app.kyberwsap.bond as hostile. Recommended actions include adding the domain to deny‑list rules at perimeter firewalls, DNS filtering solutions, and endpoint protection policies, as well as monitoring the associated IP address 172.67.180.68 for any future activity. Continuous re‑evaluation is advised in case the domain is re‑activated or repurposed.