sebvia[.]com

PhishDestroy identifies sebvia.com as an active crypto-draining phishing domain designed to trick users into connecting wallets and stealing funds through a fake login interface. Security researchers have observed this domain participating in generic phishing campaigns targeting cryptocurrency users, with threat actors impersonating legitimate services to harvest private keys and initiate unauthorized transfers. The infrastructure behind this domain is actively maintained and has yet to be detected by antivirus engines despite its malicious purpose. This domain was flagged under seed 5e60e8 after analysis revealed it resolves to IP address 188.114.97.3 using a Let's Encrypt SSL certificate. VirusTotal confirms 0 security vendors have detected this threat out of 95 scanners as of the latest analysis. The domain was registered on July 22, 2022 through Launchpad.com Inc., which provides attackers with plausible domain age to evade reputation-based detection systems. The combination of recent domain registration, unflagged status, and hosting on a bulletproof IP address suggests this is part of a coordinated campaign rather than an isolated incident. If you have visited sebvia.com or entered any credentials while connected to a wallet, immediately revoke connected permissions through your wallet interface and transfer remaining funds to a new wallet. Do not interact with any prompts or transaction requests from this domain under any circumstances. Report the domain to PhishDestroy using the exact URL and timestamp of your visit to help block this infrastructure for other users. Monitor your transaction history and device for any signs of compromise, and consider enabling hardware wallet signing for all future transactions as an additional security measure against remote drainers.