# Phishing domains under .sbs

.sbs accounts for 2,037 of the 224,866 domains in the PhishDestroy database (0.91%), with 98 new ones in the last 30 days. The most impersonated brand under .sbs is Google. 449 were online at the last check and 96 have a confirmed takedown.

2,037Reported .sbs domains

0.91%Share of PhishDestroy reports

98Last 30 days

96Confirmed takedowns

## Detections per month

.sbs phishing domains detected per month: 1,869 from 2025-11 to 2026-10; peak 419.

## Brands and registrars

### Impersonated brands

- [Google](https://phishdestroy.io/brand/google/)412
- [MetaMask](https://phishdestroy.io/brand/metamask/)68
- [Telegram](https://phishdestroy.io/brand/telegram/)44
- [Binance](https://phishdestroy.io/brand/binance/)36
- [Solana](https://phishdestroy.io/brand/solana/)25
- [Kraken](https://phishdestroy.io/brand/kraken/)22
- [1inch](https://phishdestroy.io/brand/1inch/)15
- [Telegram](https://phishdestroy.io/brand/telegram/)14

### Registrars

- [Dynadot](https://phishdestroy.io/registrar/dynadot/)614
- [NICENIC](https://phishdestroy.io/registrar/nicenic/)472
- [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)149
- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)115
- [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)113
- [NameSilo](https://phishdestroy.io/registrar/namesilo/)100
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)74
- [HOSTINGER operations](https://phishdestroy.io/registrar/hostinger/)53

## Latest .sbs phishing domains

The 30 most recently detected .sbs domains
Domain | First detected | Status at last check | Registrar | 
[nexo-claim.sbs](https://phishdestroy.io/domain/nexo-claim.sbs/) | 2026-10-22 | Online | NICENIC | 
[robloxcheats.sbs](https://phishdestroy.io/domain/robloxcheats.sbs/) | 2026-10-22 | Online | NICENIC | 
[discordzapretik.sbs](https://phishdestroy.io/domain/discordzapretik.sbs/) | 2026-10-22 | Online | NICENIC | 
[aurex-trade-ai-poland.sbs](https://phishdestroy.io/domain/aurex-trade-ai-poland.sbs/) | 2026-10-22 | Online | Dynadot | 
[tempswg.sbs](https://phishdestroy.io/domain/tempswg.sbs/) | 2026-10-20 | Online | NICENIC | 
[cineloop.sbs](https://phishdestroy.io/domain/cineloop.sbs/) | 2026-10-20 | Online | NICENIC | 
[methstreams-v2.sbs](https://phishdestroy.io/domain/methstreams-v2.sbs/) | 2026-10-20 | Online | Spaceship | 
[go-zeexpresss24h.sbs](https://phishdestroy.io/domain/go-zeexpresss24h.sbs/) | 2026-10-20 | Online | Spaceship | 
[oop-sheets.sbs](https://phishdestroy.io/domain/oop-sheets.sbs/) | 2026-10-19 | Online | Spaceship | 
[oopbuy-spreadsheets.sbs](https://phishdestroy.io/domain/oopbuy-spreadsheets.sbs/) | 2026-10-19 | Online | Spaceship | 
[superbuyfr.sbs](https://phishdestroy.io/domain/superbuyfr.sbs/) | 2026-10-19 | Online | Spaceship | 
[superbuyde.sbs](https://phishdestroy.io/domain/superbuyde.sbs/) | 2026-10-19 | Online | Spaceship | 
[superbuy-spreadsheet.sbs](https://phishdestroy.io/domain/superbuy-spreadsheet.sbs/) | 2026-10-19 | Online | Spaceship | 
[cloudsol.sbs](https://phishdestroy.io/domain/cloudsol.sbs/) | 2026-10-19 | Online | Dynadot | 
[raydiun.sbs](https://phishdestroy.io/domain/raydiun.sbs/) | 2026-10-19 | Online | Dynadot | 
[raydiiun.sbs](https://phishdestroy.io/domain/raydiiun.sbs/) | 2026-10-16 | Offline | Dynadot | 
[oopbuyse.sbs](https://phishdestroy.io/domain/oopbuyse.sbs/) | 2026-10-16 | Online | Spaceship | 
[partswap.sbs](https://phishdestroy.io/domain/partswap.sbs/) | 2026-10-16 | Online | Global Domain | 
[rainbet.sbs](https://phishdestroy.io/domain/rainbet.sbs/) | 2026-10-14 | Online | Dynadot | 
[web3savingsplan.sbs](https://phishdestroy.io/domain/web3savingsplan.sbs/) | 2026-10-14 | Online | GLOBAL ASSET DOMAINS | 
[embercurve.sbs](https://phishdestroy.io/domain/embercurve.sbs/) | 2026-10-13 | Online | NICENIC | 
[login.authhmicrosoftonline.sbs](https://phishdestroy.io/domain/login.authhmicrosoftonline.sbs/) | 2026-10-13 | Online | NameSilo | 
[coin-web3.sbs](https://phishdestroy.io/domain/coin-web3.sbs/) | 2026-10-13 | Online | NameSilo | 
[entruststakess.sbs](https://phishdestroy.io/domain/entruststakess.sbs/) | 2026-10-13 | Online | Global Domain | 
[opentrustcardwallet.sbs](https://phishdestroy.io/domain/opentrustcardwallet.sbs/) | 2026-10-13 | Online | NICENIC | 
[lenapspvcn.sbs](https://phishdestroy.io/domain/lenapspvcn.sbs/) | 2026-10-11 | Online | Dynadot | 
[deriveapp.sbs](https://phishdestroy.io/domain/deriveapp.sbs/) | 2026-10-11 | Online | NICENIC | 
[immediate-v4-app.sbs](https://phishdestroy.io/domain/immediate-v4-app.sbs/) | 2026-10-11 | Online | NameSilo | 
[paperdao.xyz-proposal.sbs](https://phishdestroy.io/domain/paperdao.xyz-proposal.sbs/) | 2026-10-11 | Unknown | NICENIC | 
[argus-world.sbs](https://phishdestroy.io/domain/argus-world.sbs/) | 2026-10-10 | Unknown | NICENIC | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .sbs registrations; first .sbs report 2025-07-09.

Canonical: https://phishdestroy.io/tld/sbs/