# zeallyrewards.icu — SUSPICIOUS

> zeallyrewards.icu is a medium-risk phishing site flagged on multiple blocklists. Avoid interaction as it is now offline but still poses potential risk.

## Summary
PhishDestroy identifies zeallyrewards.icu as a generic phishing domain created on February 21, 2026, aiming to deceive users with a misleading page titled "Nur einen Moment…". The domain was classified as medium risk due to its phishing intent.

Technical analysis shows zeallyrewards.icu resolves to IP 104.21.24.196 and is registered through NiceNIC International Group Co., Limited. It is listed on two security blocklists and flagged by 4 out of 95 VirusTotal vendors, indicating some detection but not widespread consensus.

The domain has been taken offline, reducing immediate threat exposure. Users should remain cautious and avoid revisiting this domain or interacting with any associated content to prevent potential credential theft or fraud.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Nur einen Moment…

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Expires: 2027-01-09 00:00:00
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.24.196
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["rommy.ns.cloudflare.com", "ulla.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["Fortinet", "Gridinsoft", "Seclookup", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "ScamSniffer"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c53f4-a753-74eb-8397-6a4c2f8b6056.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/090b6886-c570-461b-aeff-6db8c7452377
- Wayback Machine: https://web.archive.org/web/https://zeallyrewards.icu
- PhishDestroy: https://phishdestroy.io/domain/zeallyrewards.icu/
- LLM endpoint: https://phishdestroy.io/domain/zeallyrewards.icu/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/zeallyrewards.icu/
Last updated: 2026-03-19