MALICIOUS — HIGH
rebio.cfd 网络钓鱼与安全检查
rebio[.]
PhishDestroy identifies Rebio.cfd as an active Fortnite-themed phishing domain designed to trick users into revealing login credentials under the guise of Chapter 7 Season 2’s Rivalries event.
- VirusTotal
- 2/94
- Blocklists
- 1 · Enkrypt
- 可用性
- 内容不可用 · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
rebio.cfd — 内容不可用 (HTTP 502). 品牌冒充:MetaMask; 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 2/94 (alphaMountain.ai, Bfore.Ai PreCrime); URLScan malicious verdict; 1 external blocklist match (Enkrypt); PhishDestroy score 58/100. 注册商: Web Commerce Communica….
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Evidence Analysis
PhishDestroy identifies Rebio.cfd as an active Fortnite-themed phishing domain designed to trick users into revealing login credentials under the guise of Chapter 7 Season 2’s Rivalries event. The site closely mimics Epic Games’ official pages, using social engineering tactics to exploit player excitement around new Fortnite content. Once a user enters their credentials, they risk account takeover, financial fraud, or identity theft—common outcomes of such gaming-related phishing campaigns. This domain was flagged after being found on 2 security blocklists and blocked by cryptocurrency wallet extensions MetaMask and Enkrypt. VirusTotal currently shows 0 detections out of 95 engines despite its active status. Rebio.cfd was registered on October 03, 2025, through Web Commerce Communications Ltd and uses a Let’s Encrypt SSL certificate to appear trustworthy. The IP address 172.67.161.208 hosts this malicious site, which remains accessible at the time of this report. If you visited Rebio.cfd, immediately change your Fortnite account password and enable two-factor authentication. Scan your device for malware using trusted antivirus tools like Malwarebytes or Windows Defender. Avoid entering any login credentials on untrusted sites—always verify the URL and look for HTTPS with a valid certificate issued to Epic Games. Report the domain to your browser’s security team and consider using password managers with built-in phishing detection to prevent future exposure.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
数据覆盖范围12 recorded checks
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
SHORTDOT 域名区 · 公开证据
.cfd
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
所用技术 · 4 identified
Utility-first CSS framework for rapid custom UI development.
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
证据与外部报告Independent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。