sachicoin-collab[.]fun

Analysis of sachicoin-collab.fun shows a newly registered domain created on February 21, 2026 that resolves to the IPv4 address 158.94.208.165. The IP is allocated to AS202412, identified as Omegatech LTD, and geolocated to Germany. No SSL certificate is presented for the domain, and an HTTP request returns the page title "404 Not Found," indicating that the web service is currently unavailable or has been removed. VirusTotal has recorded detections from two of ninety‑three security vendors, and the domain appears on a single external blocklist, specifically PhishDestroy.

Independent reputation scoring from Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious classification. The domain is listed as a generic phishing threat with an elevated risk level, though the exact phishing payload or targeted brand cannot be verified because the site is offline and no page content has been captured. The limited detection count suggests that the malicious infrastructure is either newly deployed or has evaded broader detection.

Defenders should treat the domain as hostile: block the FQDN and its resolved IP address at perimeter devices, add the address to internal threat‑intel feeds, and monitor for any future resolution changes. Continuous querying of passive DNS and reputational services is recommended to detect re‑hosting attempts. Because the site currently returns a 404 response, any future activation may indicate a shift in tactics; therefore, periodic re‑assessment of the domain’s status and associated IP reputation is advisable.