ebay60[.]sbs

The domain ebay60.sbs is currently active and returns HTTP 200. Infrastructure analysis shows it resolves to 45.135.237.181, an address registered to Superhub Limited in Hong Kong and served through Cloudflare name servers becky.ns.cloudflare.com and conrad.ns.cloudflare.com. The site uses a Let’s Encrypt R13 certificate, indicating a recent TLS deployment. Registration records list Spaceship, Inc. as the registrar. Multiple threat‑intelligence sources have flagged the domain: PhishDestroy, MetaMask and SEAL block it, and it appears on three public blocklists. AlienVault OTX includes the domain in two pulses, and VirusTotal reports 11 of 91 scanners flagging it. The domain is classified as a brand‑impersonation campaign targeting eBay, consistent with its listed brand target. While the exact phishing page content has not been publicly disclosed, the convergence of blocklist presence, scanner detections, and attribution to eBay suggests a high‑confidence malicious intent. Defenders should block the domain at perimeter firewalls, update DNS filtering feeds, and monitor outbound connections to the associated IP. Incident response teams should treat any eBay‑related credential submissions from this host as compromised and advise affected users to reset passwords and enable MFA.