rebelrabbits[.]xyz
“Rebel Rabbits NFT Giveaway”
rebelrabbits.xyz — Kesalahan server (HTTP 502). Peniruan identitas merek: Rabby; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 13/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, Forcepoint ThreatSeeker); URLQuery 1 alert; Spamhaus DBL_PHISH; PhishDestroy score 93/100. Registrar: NiceNIC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain rebelrabbits.xyz was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is presently taken offline. DNS resolution points to the address 188.114.97.3, an AS13335 Cloudflare, Inc. host located in the United States. Authoritative name servers are earl.ns.cloudflare.com and laura.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. The site presented the page title “Rebel Rabbits NFT Giveaway,” indicating an airdrop‑style crypto lure, and the threat profile lists the campaign as a brand‑impersonation effort targeting the Rabby brand.
The SSL certificate is issued by Google Trust Services under the WE1 designation, providing a valid TLS chain but not mitigating the malicious intent. Technical fingerprints show the presence of Hostinger hosting components, Cloudflare Browser Insights, and HTTP/3 support, suggesting a standard Cloudflare‑fronted web stack. Gridinsoft assigned a trust score of 0 out of 100, reflecting extreme suspicion. Threat intelligence aggregation reports that 13 of 95 VirusTotal scanners flagged the domain, and the domain appears on a single security blocklist, specifically PhishDestroy.
The campaign is categorized as a crypto scam employing an “Airdrop Scam” kit. No additional public content analysis is available beyond the page title, so the exact visual or functional elements of the page remain unverified. Defenders should add rebelrabbits.xyz and its resolving IP 188.114.97.3 to blocklists, monitor for future registrations that reuse the same registrar or Cloudflare name servers, and consider the low trust score and multi‑vendor detections as indicators for proactive mitigation. Continuous watch of related brand‑impersonation patterns targeting Rabby is recommended to pre‑empt similar airdrop‑oriented campaigns.
Intelijen Keamanan Jaringan Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | rebelrabbits.xyz |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-16 03:21:17 UTC
Teknologi · 4 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of rebelrabbits.xyz · checked Mar 2, 2026
Bukti & Laporan Eksternal
PD-20260214-4336CA Recipient: abuse@nicenic.net Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive