Phishing detection: swiftpoint.cyou

Facebook
https://swiftpoint.cyou/facebook/login Access site
Screenshot
Screenshot of swiftpoint.cyou
Investigate
Domain swiftpoint.cyou1 CT host on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 20.106.126.48
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://swiftpoint.cyou/facebook/login
urlscan Wayback archive.today
Cert YR1
crt.sh Censys Google CT
Phishunt analysis Beta
39 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +3.9 Password field
  • +3.2 Young domain
  • +3.0 OpenPhish
  • +1.6 ASN reputation
  • +1.3 Suspicious TLD
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.9 No registrar lock
  • +0.7 Unrecognised DNS provider
  • +0.6 Brand impersonation in path
  • +0.6 Login text in screenshot
  • +0.6 Registrar reputation
  • +0.5 Young certificate
  • +0.4 Credential path
  • +0.3 Free CA
  • +0.3 Long domain
  • +0.1 External scripts
23 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Fake Facebook login page on an unrelated .cyou domain, using a /facebook/login path and a password field to capture account credentials. Hosted on Microsoft infrastructure and listed by OpenPhish. No CSP or HSTS headers.

Brand impersonation in pathPassword fieldOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-11-05 · confidence 90%
Domain & Network
Whois
Registrar GLOBAL ASSET DOMAINS INC.
Network
IP 20.106.126.48 Microsoft Azure AzureCloud.westus3
Country United StatesUnited States
Hosting Microsoft Corporation
ASN AS8075
TLS Cert YR1
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN Microsoft Corporation
abuse@microsoft.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-11-05 01:02 UTC  ·  Last refreshed 2026-11-05 05:30 UTC