mysteriousincome[.]sbs

The domain mysteriousincome.sbs is a crypto scam operation that has already been flagged by 5 out of 94 vendors on VirusTotal. Despite its current offline status, it has appeared on three public blocklists, including those maintained by PhishDestroy, MetaMask, and SEAL. This indicates a concerted effort to exploit users in the cryptocurrency space.

Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, mysteriousincome.sbs was created on April 23, 2026. The swift addition to multiple blocklists suggests that the domain was quickly identified as a threat by security entities. Such rapid detection is crucial in the fast-moving world of online scams, particularly those targeting cryptocurrency users.

The presence of mysteriousincome.sbs on blocklists and its offline status do not guarantee safety, as threat actors often rotate domains to evade detection. The 5 out of 94 VirusTotal detections underscore the domain's malicious nature, highlighting the importance of early identification and response to such threats. The involvement of MetaMask in blocking this domain further underscores the specific targeting of cryptocurrency users, who are often prime targets for phishing and scam operations.