fabonex[.]com

PhishDestroy identifies fabonex.com as an active credential-harvesting domain masquerading as a legitimate online retailer. This site lures victims with fake discounts and promotions before capturing login credentials, payment details, and personal information for fraudulent use. The threat is particularly dangerous because it exploits user trust in e-commerce platforms to facilitate financial theft.

Evidence supporting this assessment includes its recent creation date (April 22, 2026), registration through Fewmoretaps OU (Trustname.com), and current absence from VirusTotal’s detection grid (3/95 engines). The domain resolves to IP 104.21.68.230 and operates under a valid Let’s Encrypt SSL certificate, which may falsely reassure visitors. Such tactics are common in phishing campaigns targeting bargain-seeking shoppers during peak retail seasons.

Users who visited fabonex.com should immediately check banking statements for unauthorized transactions and reset passwords on all online accounts that share the same credentials. To prevent future exposure, block the domain via hosts file or firewall rules and avoid interacting with unsolicited links promising ‘exclusive deals.’ Report the site to your antivirus provider and local cybercrime units to help disrupt the operation.