dpshtrr[.]sbs

The domain dpshtrr.sbs is currently offline but has been flagged as malicious by four out of 92 vendors on VirusTotal. It was hosted on an IP managed by Tencent Cloud Computing in the United States and utilized an SSL certificate issued by Let's Encrypt. Despite its offline status, the domain appeared on three public blocklists, including those maintained by PhishDestroy, MetaMask, and SEAL.

Registered through Spaceship, Inc., dpshtrr.sbs was created on May 13, 2026. Its relatively low abuse score of 8 out of 100 suggests limited malicious activity, or possibly an early-stage operation before it was taken down. The domain's presence on several blocklists indicates that it was involved in phishing activities, although specific details about the targeted brand or type of phishing attack remain unspecified.

The fact that the domain is already offline reduces its immediate threat level, but its brief active period highlights the importance of rapid detection and response. PhishDestroy's inclusion of dpshtrr.sbs on its blocklist demonstrates its proactive approach to identifying and mitigating phishing threats. The involvement of major players like MetaMask in flagging the domain suggests that it might have been part of a broader phishing campaign targeting cryptocurrency users or similar high-value targets.