# shibus.net — SUSPICIOUS

> shibus.net is a crypto drainer domain with 0/95 VirusTotal detections. NICENIC INTERNATIONAL GROUP registered it on July 17, 2025. Do not visit or interact.

## Summary
PhishDestroy identifies shibus.net as an active crypto drainer domain under investigation for malicious activity. This domain was flagged due to its association with unauthorized cryptocurrency fund transfers through deceptive tactics. Users should exercise extreme caution and avoid any interaction with this domain to prevent financial loss.  This domain exhibits multiple red flags in forensic analysis. VirusTotal currently shows 0 out of 95 detection engines flagging this domain, indicating it evades standard antivirus mechanisms. The domain resolves to IP address 188.114.97.3 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on July 17, 2025, a suspiciously recent creation date for a domain with potential malicious intent. SSL certification from Google Trust Services suggests an attempt to appear legitimate despite the fraudulent nature.  Technical analysis indicates shibus.net poses high-risk threats to cryptocurrency users. The domain likely employs social engineering tactics to trick users into connecting wallets or transferring funds to attacker-controlled addresses. The 0/95 VirusTotal score reveals this domain has not yet been widely recognized by security vendors, making it particularly dangerous for unaware users. The use of a recently registered domain through a known registrar highlights the sophistication of the threat actors in avoiding detection.  If you have visited shibus.net or interacted with it in any way, immediately disconnect your cryptocurrency wallet from the website. Revoke any permissions granted to this domain through your wallet settings. Scan all connected devices for malware using reputable antivirus software. Report the domain to your wallet provider and relevant cryptocurrency platforms to help prevent further victimization. Share this intelligence with your network to enhance collective security awareness against emerging crypto drainer threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-07-17 12:35:34
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/shibus.net
- PhishDestroy: https://phishdestroy.io/domain/shibus.net/
- LLM endpoint: https://phishdestroy.io/domain/shibus.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/shibus.net/
Last updated: 2026-04-06