web3[.]sbsbot[.]sbs

PhishDestroy identifies the domain web3.sbsbot.sbs as an active crypto drainer posing as a Web3 service. This threat uses deceptive tactics to trick users into connecting crypto wallets and authorizing malicious transactions. The domain is currently under investigation but remains operational, targeting cryptocurrency holders with fraudulent schemes.

This domain was flagged by 4 of 95 VirusTotal vendors, indicating it has not yet been widely detected by security tools. It was registered through Dynadot LLC, resolves to IP address 174.138.191.43, and was created on April 19, 2026. The domain utilizes a Let’s Encrypt SSL certificate, which may lend false legitimacy to its fraudulent operations. Despite its low detection rate, the absence of blocklist entries and low trust scores suggests it is a newly emerged threat with potential to evade initial scrutiny.

The current status of web3.sbsbot.sbs remains active and under investigation. Users are strongly advised to avoid visiting or interacting with this domain. If encountered, report the domain to your security provider and relevant cryptocurrency platforms. Block the IP address 174.138.191.43 and the domain at your network perimeter. Always verify Web3 URLs through official channels and use hardware wallets for transaction signing to mitigate crypto drainer risks.