vote-kyan[.]xyz

PhishDestroy identifies vote-kyan.xyz as an active crypto phishing domain impersonating Kyan, a legitimate crypto options and perpetual trading platform. This domain employs generic phishing tactics to harvest user credentials and financial data under the guise of a legitimate trading interface. The elevated risk stems from its recent creation and the combination of impersonation and data theft objectives. This domain was flagged by 3 of 95 VirusTotal security vendors, resides on the ScamSniffer blocklist, and operates via registrar PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to IP 172.67.183.32 and was registered on April 08, 2026, making it just 17 days old at the time of analysis. The SSL certificate is issued by Let's Encrypt, which does not indicate legitimacy as threat actors commonly exploit free certificates to appear authentic. This combination of recent registration, low detection rate, and blocklist presence elevates the threat to elevated status. Users should avoid interacting with vote-kyan.xyz or any links from unsolicited messages referencing crypto trading or account verification. Never enter credentials or financial information on unfamiliar domains, even if SSL-encrypted. Verify URLs through official channels and use browser extensions or security tools that detect phishing sites. Organizations should update threat intelligence feeds to include this domain and block access via DNS or network filters to prevent credential theft and financial fraud.