dapang[.]sbs

The domain dapang.sbs is currently identified as a cryptocurrency phishing platform specifically targeting digital asset traders. Analysis indicates this domain operated under the deceptive page title 'Trade DAPANG,' suggesting an attempt to impersonate legitimate cryptocurrency exchange services. As of the latest assessment, the domain has been taken offline, though prior activity and infrastructure remain relevant for threat intelligence purposes. Infrastructure analysis reveals multiple high-risk indicators associated with dapang.sbs. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 24, 2026, an unusually forward-dated registration that may indicate an attempt to evade immediate detection. It resolved to the IP address 172.67.155.44, a network segment frequently observed in malicious campaigns. Security vendors flagged this domain as malicious, with 20 out of 95 VirusTotal engines detecting it as a phishing threat. Additionally, the domain appears on three distinct security blocklists, further corroborating its fraudulent nature. The combination of these indicators—early detection by multiple vendors, blocklist inclusion, and suspicious registration patterns—demonstrates a deliberate effort to deceive users. Given the domain's current offline status, the immediate risk of direct interaction has been mitigated. However, the infrastructure and historical activity associated with dapang.sbs warrant continued vigilance. Organizations and individuals are advised to block the domain and its associated IP address at the network perimeter. Users who may have interacted with this domain should immediately revoke any active sessions, reset credentials, and monitor accounts for unauthorized transactions. Security teams should treat this domain as a confirmed phishing artifact and include it in threat intelligence feeds for proactive defense measures.