verifica-g[.]sbs

PhishDestroy identifies verifica-g.sbs as a high-risk generic phishing domain currently active as a cryptocurrency drainer. The domain mimics verification portals to trick users into connecting wallets or submitting credentials. No specific brand impersonation is confirmed, but the page title 'Verificação' (Portuguese for 'Verification') suggests localized targeting, possibly related to financial or identity verification services. verifica-g.sbs was registered through Dynadot LLC on May 02, 2026, resolving to IP 193.108.130.11. The domain holds a Let's Encrypt SSL certificate and was flagged by 2 out of 95 security vendors on VirusTotal. It appears on 2 security blocklists and is actively blocked by MetaMask and SEAL. The domain is newly registered, indicating a likely opportunistic campaign leveraging fresh infrastructure to evade detection. This domain remains active and poses a significant threat to cryptocurrency users. Security responses include proactive blocking by MetaMask and SEAL, but the domain's recent creation and low detection rate on VirusTotal highlight the risk of evasion. Users should avoid interacting with this domain entirely. The remaining risk is high due to the active status, low detection coverage, and potential for further abuse in targeted phishing campaigns.