sevvebi[.]cfd

The domain sevvebi.cfd has been identified as a high-risk credential theft threat. This domain is currently active and poses significant security risks to users who may inadvertently interact with it. The page title 'Messenger' suggests potential impersonation of well-known communication platforms, aiming to deceive users into providing sensitive information. The presence of this domain in active phishing campaigns necessitates immediate attention and caution.

Analysis indicates that the domain sevvebi.cfd resolves to the IP address 188.114.96.3, which is located in the United States and operated by AS13335 Cloudflare, Inc. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and was created on June 17, 2026. It appears on one security blocklist, specifically flagged by PhishDestroy. VirusTotal reports that 10 out of 95 security vendors have detected malicious activity associated with this domain, reinforcing the credibility of its threat status. Additionally, the SSL certificate issued by Google Trust Services / WE1 may add a layer of deceptive legitimacy to the site.

Given the active status and high-risk level of sevvebi.cfd, it is recommended that users exercise heightened vigilance and avoid interacting with this domain entirely. Organizations should implement robust security measures to detect and block access to this domain within their networks. Continuous monitoring of blocklists and security vendor reports can help mitigate the risk posed by such threats. Users are advised to verify the authenticity of communication platforms and remain cautious of unsolicited requests for credentials or personal information.