viabazge[.]sbs

This domain, viabazge.sbs, is flagged as a generic phishing site designed for credential harvesting. Analysis indicates no direct association with a specific brand or drainer kit, though the use of a 403 Forbidden page suggests an attempt to conceal malicious activity behind a server misconfiguration or access restriction. The domain infrastructure leverages Cloudflare for hosting and protection, which is common in phishing operations to obscure origin servers and evade takedowns. Infrastructure analysis reveals the following technical indicators: the domain was registered on May 09, 2026, through Dynadot LLC, an uncommon future-dated creation that may indicate automated or bulk registration. It resolves to the IP address 188.114.97.3 and employs technologies such as Cloudflare Browser Insights and HTTP/3. The domain is flagged by 5 out of 95 security vendors on VirusTotal, holds a Gridinsoft trust score of 0/100, and appears on one security blocklist. The SSL certificate is issued by Let’s Encrypt, which, while legitimate, is frequently exploited in phishing campaigns due to its free and automated issuance process. As of the latest assessment, viabazge.sbs has been taken offline, likely due to enforcement actions or hosting provider intervention. The domain was blocked by PhishDestroy and appears in one AlienVault OTX threat intelligence pulse, confirming its malicious classification. Despite its current offline status, the domain remains a residual risk due to potential re-registration or reuse of associated infrastructure. Organizations are advised to monitor for related indicators, including the IP address and registrar details, and implement blocking rules for the domain and its resolved IP in perimeter security controls.