# PhishDestroy domain threat record: e-rbsi.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/e-rbsi.com/
Machine-readable companion: https://phishdestroy.io/domain/e-rbsi.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 06:15:06 UTC
- Last availability or vendor check: 2026-10-26 06:16:33 UTC
- Stored record updated: 2026-10-26 07:30:13 UTC
- VirusTotal detections in the stored snapshot: 12/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: wordpress

## Stored infrastructure

- Observed IP address: 70.40.201.220
- Registrar in stored WHOIS data: Bluehost Inc.
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2009-01-27 17:23:22 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a176d9-a7c4-7039-99cc-af104640515e/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/e-rbsi.com
- Certificate Transparency search: https://crt.sh/?q=%25.e-rbsi.com
- Web Archive lookup: https://web.archive.org/web/*/https://e-rbsi.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed e-rbsi.com as a suspicious domain based on automated analysis. The recorded page title was "E-Retail Business Solutions – Quality • On Time • Friendly • Within Budget". The domain was first seen by PhishDestroy on 2026-10-26 and returned an HTTP 200 response on that date.

How the scam works
The classification reflects a generic phishing risk: domains that appear legitimate may be used to trick users into entering credentials or personal data. No specific credential‑harvesting form or malicious payload was observed on the page, so the risk is inferred from the detection profile rather than confirmed behavior.

Evidence
VirusTotal scanned the domain on 2026-10-24 and recorded 12 malicious detections from vendors including BitDefender, Kaspersky, G-Data and others. Google Safe Browsing checked the domain on 2026-10-26 and did not flag it. URLScan captured a snapshot on 2026-07-30 and returned a clean verdict. OTX listed 13 pulses mentioning the domain as of 2026-10-26. PhishDestroy’s internal blocklist marks the domain as malicious, while external blocklists returned zero hits on the same day.

Infrastructure
The domain was registered on 2009-01-27 through Bluehost Inc. and is set to expire on 2027-01-27. The DNS A record pointed to the IP 70.40.201.220, which was associated with Unified Layer in the United States. Records show an MX record for mail.e-rbsi.com, NS records at ns1.bluehost.com and ns2.bluehost.com, and an SPF TXT record. The site used a Let's Encrypt certificate valid from 2026-09-17 to 2026-12-16 and did not have DNSSEC enabled.

What to do
Visitors should avoid entering any login credentials or personal information on the site and, if they have already done so, change affected passwords immediately. Organizations can block e-rbsi.com at the firewall or proxy level and monitor outbound traffic for connections to its IP address. Security teams should review logs for any access attempts and treat the domain as potentially malicious pending further investigation.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a176d9-a7c4-7039-99cc-af104640515e/
Cloudflare Radar report: https://radar.cloudflare.com/scan/9ecede63-63fa-46a7-a7cd-4b6bf9c64546
Stored capture screenshot: https://i.ibb.co/p6hShyK5/e09f5af111d7.png
Cloudflare Radar screenshot (2026-10-26T06:15:45Z): https://screenshots.phishdestroy.io/cf/9ecede63-63fa-46a7-a7cd-4b6bf9c64546.png
URLScan screenshot (2026-07-30T08:59:14Z): https://screenshots.phishdestroy.io/us/019fb23f-b8a8-768a-af07-d8f2dc24d8d8.png
URLScan capture report: https://urlscan.io/result/019fb23f-b8a8-768a-af07-d8f2dc24d8d8/
VirusTotal report: https://www.virustotal.com/gui/domain/e-rbsi.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=e-rbsi.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 06:17:08 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/p6hShyK5/e09f5af111d7.png
  Captured: 2026-10-26 06:16:33 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a176d9-a7c4-7039-99cc-af104640515e.png
  Captured: 2026-10-26 06:16:33 UTC
  Source report: https://urlscan.io/result/01a176d9-a7c4-7039-99cc-af104640515e/
- URLScan capture 2: https://urlscan.io/screenshots/019fb23f-b8a8-768a-af07-d8f2dc24d8d8.png
  Captured: 2026-10-26 06:15:06 UTC
  Source report: https://urlscan.io/result/01a176d9-a7c4-7039-99cc-af104640515e/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/9ecede63-63fa-46a7-a7cd-4b6bf9c64546.png
  Captured: 2026-10-26 06:15:45 UTC
  Source report: https://radar.cloudflare.com/scan/9ecede63-63fa-46a7-a7cd-4b6bf9c64546
  SHA-256: e4c24117aee3f407b85fe565507b75405906f591d3b6c2795f22cd6a51e5fdb0
- URLQuery: https://screenshots.phishdestroy.io/uq/daed25b3-702a-4fa8-9110-bcda5854287e.png
  Source report: https://urlquery.net/report/daed25b3-702a-4fa8-9110-bcda5854287e
  SHA-256: 176122dd9557278854c65f37fc08427ef8555e1b33f9dfa46dcfd2ef4e467dc7
- URLScan · 2026-07-30: https://screenshots.phishdestroy.io/us/019fb23f-b8a8-768a-af07-d8f2dc24d8d8.png
  Captured: 2026-07-30 08:59:14 UTC
  Source report: https://urlscan.io/result/019fb23f-b8a8-768a-af07-d8f2dc24d8d8/
  SHA-256: d4def15bdc20e1d00def508555f469f79108b1abd8785d87ccd2dd295549eafe
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a176dd-a5cc-74d1-aee1-264d8be4e415.png
  Captured: 2026-10-26 06:21:36 UTC
  Source report: https://urlscan.io/result/01a176dd-a5cc-74d1-aee1-264d8be4e415/
  SHA-256: d4def15bdc20e1d00def508555f469f79108b1abd8785d87ccd2dd295549eafe

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T06:30:43Z",
        "uuid": "01a176d9-a7c4-7039-99cc-af104640515e",
        "scanned_at": "2026-10-26T06:15:45Z",
        "final_url": "https://e-rbsi.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://e-rbsi.com/",
                "from": "http://e-rbsi.com/",
                "status": 307
            }
        ],
        "ip": "70.40.201.220",
        "ptr": "70-40-201-220.unifiedlayer.com",
        "ips": [
            "70.40.201.220"
        ],
        "asns": [
            "46606"
        ],
        "countries": [
            "US"
        ],
        "link_domains": [
            "wordpress.org"
        ],
        "doc_hash": "2a3cef2f3f77be1bdecb510dbec7d9c0b6716048d6a9a66785a3bc380251c4d1",
        "script_hashes": [
            "fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1",
            "5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9",
            "29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca",
            "ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0",
            "c84b9432dad75b6cce98abcd62eecccc82cf4e293e92f80678d8d50bd1060cfe",
            "063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3"
        ],
        "globals": [
            "wp",
            "swv",
            "wpcf7",
            "twentytwentyoneResponsiveEmbeds",
            "_wpemojiSettings",
            "twemoji"
        ],
        "storage_keys": [
            "wpEmojiSettingsSupports"
        ],
        "tls": {
            "san": [
                "autoconfig.e-rbsi.com",
                "autoconfig.eretailsystems.com",
                "autodiscover.e-rbsi.com",
                "cpanel.e-rbsi.com",
                "cpanel.eretailsystems.com",
                "cpcalendars.e-rbsi.com",
                "cpcontacts.e-rbsi.com",
                "e-rbsi.com",
                "eretailsystems.com",
                "eretailsystems.e-rbsi.com"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "YR2",
            "subject": "webmail.e-rbsi.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-16T21:10:57Z",
            "valid_from": "2026-09-17T21:10:58Z"
        },
        "domain_age_days": 3810,
        "apex_age_days": 3810,
        "tls_age_days": 38,
        "tls_valid_days": 89,
        "requests": 14,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 3,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "Apache",
            "content-type": "text/html; charset=UTF-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T06:16:23Z",
        "uuid": "9ecede63-63fa-46a7-a7cd-4b6bf9c64546",
        "scanned_at": "2026-10-26T06:15:45Z",
        "final_url": "https://e-rbsi.com/",
        "status": 200,
        "history": [
            {
                "url": "https://e-rbsi.com/",
                "status": 200
            }
        ],
        "dom_hash": "f185abfc88bcf4e832948174f4fc8dab9d11e529fc454f410dd06630c11c3f2b",
        "doc_hash": "83fdd21c2a70463feba184ddcfd2ac11f1f7bf02d6667b3ee27b607f3ea4d461",
        "domain_risks": [
            "Business",
            "Business & Economy"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "e-rbsi.com",
                "type": "A",
                "value": "70.40.201.220"
            }
        ],
        "dnssec_valid": false,
        "ip": "70.40.201.220",
        "whois": {
            "registrar": "Bluehost Inc.",
            "created": "2009-01-27T18:23:22Z",
            "updated": "2026-01-12T08:10:28Z",
            "expires": "2027-01-27T18:23:22Z",
            "nameservers": [
                "ns1.bluehost.com",
                "ns2.bluehost.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T06:15:36Z",
        "analysis_at": "2026-10-24T06:09:50Z",
        "stats": {
            "timeout": 0,
            "harmless": 47,
            "malicious": 12,
            "suspicious": 0,
            "undetected": 33
        },
        "detections": {
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "phishing",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing"
        },
        "reputation": 0,
        "popularity": {
            "Cloudflare Radar": 1000000
        },
        "registrar": "Bluehost Inc.",
        "created": "2009-01-27T18:23:22Z",
        "expires": "2027-01-27T18:23:22Z",
        "updated": "2026-01-12T08:10:28Z",
        "first_seen": "2023-10-14T00:15:54Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "SOA",
                "rname": "root.box2265.bluehost.com",
                "value": "ns1.bluehost.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns1.bluehost.com"
            },
            {
                "ttl": 14400,
                "type": "A",
                "value": "70.40.201.220"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns2.bluehost.com"
            },
            {
                "ttl": 14400,
                "type": "MX",
                "value": "mail.e-rbsi.com",
                "priority": 10
            },
            {
                "ttl": 14400,
                "type": "TXT",
                "value": "v=spf1 +a +mx +ip4:173.254.104.194 +include:websitewelcome.com ~all"
            }
        ],
        "dns_at": "2026-10-24T06:13:13Z",
        "jarm": "29d29d15d29d29d00042d42d000000cd600c085f371f8533aaf66051f8e5b1",
        "cert": {
            "san": [
                "autoconfig.e-rbsi.com",
                "autoconfig.eretailsystems.com",
                "autodiscover.e-rbsi.com",
                "cpanel.e-rbsi.com",
                "cpanel.eretailsystems.com",
                "cpcalendars.e-rbsi.com",
                "cpcontacts.e-rbsi.com",
                "e-rbsi.com",
                "eretailsystems.com",
                "eretailsystems.e-rbsi.com"
            ],
            "issuer": "Let's Encrypt / YR2",
            "serial": "5d5b73c61257302af7f1036d9082d6e7d3d",
            "sha256": "bf5b4b2d34cc255ee409a557e9411422b5419e4b4fdc214f43e2fd2f4cebdc1e",
            "subject": "webmail.e-rbsi.com",
            "valid_to": "2026-12-16T21:10:57Z",
            "valid_from": "2026-09-17T21:10:58Z"
        },
        "whois": {
            "registrar": "Bluehost Inc.",
            "registrar_iana_id": "1154",
            "registrar_url": "https://www.bluehost.com",
            "created": "2009-01-27T18:23:22Z",
            "updated": "2026-01-12T08:10:28Z",
            "expires": "2027-01-27T18:23:22Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.bluehost.com",
                "ns2.bluehost.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-01-27T18:23:22Z",
                "last changed": "2026-01-12T08:10:28Z",
                "registration": "2009-01-27T18:23:22Z",
                "last update of RDAP database": "2026-10-17T14:18:56Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T06:16:34Z",
        "mail_config": {
            "mx": [
                "mail.e-rbsi.com"
            ],
            "spf": "v=spf1 +a +mx +ip4:173.254.104.194 +include:websitewelcome.com ~all",
            "dkim": [
                "default"
            ],
            "dkim_bits": 768,
            "spf_lookups": 10
        },
        "caa_records": {
            "domain": "e-rbsi.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-26T06:15:23Z",
            "first": "2011-01-29T00:51:05Z",
            "changes": 19,
            "days_archived": 33,
            "scans_per_day": 0.01,
            "avg_page_bytes": 3241
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://e-rbsi.com/wp-sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 91
        },
        "social_tags": {
            "title": "E-Retail Business Solutions – Quality • On Time • Friendly • Within Budget",
            "robots": "max-image-preview:large",
            "generator": "WordPress 7.1.3",
            "canonicalUrl": "https://e-rbsi.com/"
        },
        "trackers": {
            "requests": 12
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 13,
                "tls": 162,
                "wait": 200,
                "connect": 160,
                "download": 160
            },
            "response_ms": 695
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                21,
                22,
                25,
                53,
                80,
                110,
                143,
                443,
                587,
                993,
                995,
                3306
            ]
        },
        "carbon": {
            "bytes": 31130,
            "co2_grams": 0.0011,
            "cleaner_than": 47
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.24.80",
                    "host": "ns1.bluehost.com"
                },
                {
                    "ip": "162.159.25.175",
                    "host": "ns2.bluehost.com"
                }
            ],
            "zone": "e-rbsi.com"
        },
        "location": {
            "ip": "70.40.201.220",
            "asn": "46606",
            "org": "Unified Layer",
            "city": "Phoenix",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR2",
            "subject": "webmail.e-rbsi.com"
        },
        "dns": {
            "A": [
                "70.40.201.220"
            ],
            "MX": [
                "{\"exchange\": \"mail.e-rbsi.com\", \"priority\": 10}"
            ],
            "NS": [
                "ns1.bluehost.com",
                "ns2.bluehost.com"
            ],
            "SOA": "{\"nsname\": \"ns1.bluehost.com\", \"hostmaster\": \"root.box2265.bluehost.com\", \"serial\": 2025121500, \"refresh\": 86400, \"retry\": 7200, \"expire\": 3600000, \"minttl\": 300}",
            "TXT": [
                "v=spf1 +a +mx +ip4:173.254.104.194 +include:websitewelcome.com ~all"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "70.40.201.220",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://e-rbsi.com"
            ]
        },
        "rank": {
            "domain": "e-rbsi.com"
        },
        "subdomains": {
            "count": 11,
            "subdomains": [
                "autoconfig.e-rbsi.com",
                "autodiscover.e-rbsi.com",
                "cpanel.e-rbsi.com",
                "cpcalendars.e-rbsi.com",
                "cpcontacts.e-rbsi.com",
                "eretailsystems.e-rbsi.com",
                "mail.e-rbsi.com",
                "webdisk.e-rbsi.com",
                "webmail.e-rbsi.com",
                "www.e-rbsi.com",
                "www.eretailsystems.e-rbsi.com"
            ]
        },
        "linked_pages": {
            "external": [
                "https://wordpress.org/"
            ],
            "external_count": 1,
            "internal_count": 15
        },
        "whois": {
            "registrar": "Bluehost Inc.",
            "created": "2009-01-27T18:23:22Z",
            "updated": "2026-01-12T08:10:28Z",
            "expires": "2027-01-27T18:23:22Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.bluehost.com",
                "ns2.bluehost.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "Apache",
                "content-type": "text/html; charset=UTF-8"
            }
        }
    }
}
```