cigcoin[.]sbs

The domain cigcoin.sbs presents a fraudulent web page displaying the title "Just a moment...", a common placeholder for sites under construction or verification checks, but in this context likely serves as a decoy for a scam operation. The domain name suggests an impersonation of a cryptocurrency-related brand, specifically "cigcoin," which poses a threat as a potential phishing or investment scam targeting users seeking digital currency services. The site may attempt to harvest credentials or financial information from visitors under the guise of a legitimate crypto platform.

Technical analysis reveals the domain is flagged by 4 out of 95 VirusTotal vendors, with detections from alphaMountain.ai, Fortinet, Gridinsoft, and Webroot. It is listed on 1 blocklist. The domain is registered with NICENIC INTERNATIONAL GROUP CO., LIMITED and was created on 2026-05-25, an anomalous future date indicating potential data manipulation. The IP address 104.21.27.206 is located in the United States and belongs to AS13335 Cloudflare, Inc., with nameservers june.ns.cloudflare.com and nikon.ns.cloudflare.com. The site is currently down or offline.

The domain holds a DOM risk score of 61, indicating a high risk of malicious activity. Its current offline status does not eliminate the threat, as the domain may be reactivated for future attacks. Users should avoid any interaction with this domain and treat it as a confirmed threat vector.