babuxd[.]sbs

Analysis of babuxd.sbs as of July 24, 2026 indicates the domain is currently offline but was actively used for a crypto‑related phishing campaign. The site presented the page title “ViserBank – Home,” suggesting an attempt to impersonate a financial institution. DNS resolution points to the IPv4 address 163.61.188.2, which is registered to the AS153568 NEW DHAKA HARDWARE network in the United States. The domain was registered on February 21, 2026, giving it a short lifespan typical of malicious infrastructure. Security‑vendor scans on VirusTotal show that 7 of 95 scanners flagged the domain, reinforcing the suspicion of malicious intent.

Independent reputation services assign a Gridinsoft trust score of 0 out of 100, indicating an extremely low trust rating. The SSL certificate associated with the host carries an R10 rating, a level commonly associated with poor security hygiene. The domain appears on one public security blocklist and is listed as blocked by the PhishDestroy service, confirming that at least one anti‑phishing organization has taken action against it. The declared scam type is “Crypto Scam,” consistent with the use of a financial‑sounding page title to lure victims into providing cryptocurrency credentials or payments. At present, the site’s content has not been captured, and the exact phishing kit or payload details remain unknown.

No additional intelligence such as Safe Browsing status, OTX mentions, or registrar information is available in the current dataset. Defenders should continue to block traffic to 163.61.188.2 and to the domain babuxd.sbs at the network perimeter, update URL filtering and DNS sinkhole rules, and monitor for any resurgence of the domain or related subdomains. Given the low trust score, recent registration, and the presence on a blocklist, the domain should be treated as high‑confidence malicious.