unconsol[.]sbs

PhishDestroy identifies unconsol.sbs as a live credential theft phishing domain designed to deceive users into surrendering sensitive login credentials under false pretenses. This domain was flagged due to its recent registration date and suspicious infrastructure, which aligns with tactics commonly employed in active phishing campaigns. The site leverages a Let's Encrypt SSL certificate to appear legitimate, while operating from IP 172.67.196.165—a hosting server frequently associated with malicious activity. Users who interact with this domain risk exposing their usernames, passwords, or financial details to threat actors. This domain demonstrates multiple red flags confirmed by security intelligence. VirusTotal currently reports 8/95 detections, indicating it has evaded traditional antivirus and anti-phishing filters. The domain was registered on April 16, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for accommodating high-risk registrations. While no blocklist entries were found at the time of assessment, the combination of its age, infrastructure, and SSL certificate usage strongly suggests a staged or emerging threat. The domain’s creation date is particularly concerning, as newly registered domains are often weaponized within days to exploit user trust before detection systems catch on. If you have visited unconsol.sbs, immediately cease any interaction and avoid entering credentials or personal information. Scan your device with updated antivirus software and consider changing passwords for any accounts that may have been exposed. Report the domain to your browser’s phishing alert system and notify your organization’s security team if accessed on a work device. Do not interact further—even if the site appears inactive, it may still log your IP or serve malicious payloads. Stay vigilant and verify all domains before submitting sensitive data.