# securitybotverify.sbs — SUSPICIOUS

> securitybotverify.sbs is a credential phishing domain impersonating security bots. Flagged by 0 of 95 VirusTotal vendors. See full report.

## Summary
PhishDestroy identifies securitybotverify.sbs as an active credential phishing domain currently under investigation. This domain impersonates legitimate security bot verification services to harvest user credentials.    securitybotverify.sbs was flagged by 0 of 95 VirusTotal security vendors, is registered through Dynadot LLC, resolves to IP 104.21.94.102, and was created on April 11, 2026. The domain uses a Let's Encrypt SSL certificate but has not yet been added to public blocklists, indicating a newly emerged threat vector requiring immediate attention.    Given the zero-detection status on VirusTotal and the domain's recent creation, security teams should block traffic to 104.21.94.102 and 104.21.94.0/24 at the network perimeter. Users should avoid entering credentials on this domain and report any interactions to their security operations center. Monitor for additional infrastructure pivots as this campaign may expand rapidly.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-11 22:20:38
- Registrar: Dynadot LLC
- IP: 104.21.94.102

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/731cfe8e-f4b9-4055-b3cb-fb4d17b0ab94
- PhishDestroy: https://phishdestroy.io/domain/securitybotverify.sbs/
- LLM endpoint: https://phishdestroy.io/domain/securitybotverify.sbs/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/securitybotverify.sbs/
Last updated: 2026-04-12