uselesscoin[.]sbs

The domain uselesscoin.sbs was registered on May 18, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and currently resolves to the IP address 172.67.182.221, which is hosted in Canada by a major CDN provider. The site presents an SSL certificate issued by a widely used free certificate authority and returns an HTTP 403 status code, indicating that direct content retrieval is being denied. The risk rating assigned by internal scoring is high, and the domain remains active as of the report date.

VirusTotal analysis shows that 4 of 95 scanned security vendors have flagged the domain, and the domain appears on three independent security blocklists. A separate reputation engine assigns a trust score of 0 out of 100, reinforcing the malicious classification. Additionally, a single threat‑intelligence pulse on a public sharing platform has recorded the domain, further confirming its association with malicious activity.

While the HTTP 403 response limits immediate observation of the payload, the combination of a newly created domain, low trust score, and multiple vendor detections strongly suggests that the site is being used to host a phishing campaign targeting users of cryptocurrency‑related services. The exact content, redirect behavior, or credential‑harvesting mechanisms remain unverified due to the restricted response, creating uncertainty around the specific tactics employed.

Defenders should treat uselesscoin.sbs as a high‑confidence malicious indicator. Immediate actions include adding the domain to network‑level blocklists, configuring DNS filtering to prevent resolution, and monitoring for any outbound connections to the associated IP address. Security operations teams should also instrument proxy logs for attempted accesses and consider sinkholing the domain to capture future phishing payloads. Continuous re‑evaluation is recommended as additional intelligence, such as deeper content analysis or new vendor detections, may emerge.