Phishing detection: ebayfoll.store

eBay
https://ebayfoll.store Access site
Screenshot
Screenshot of ebayfoll.store
Investigate
Domain ebayfoll.store4 CT hosts on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 38.55.194.55
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://ebayfoll.store
urlscan Wayback archive.today
Cert YR2
crt.sh Censys Google CT
Phishunt analysis Beta
70 high suspicion likely_phishingheuristic risk score · not a probability
Why?
  • +6.1 Google Safe Browsing
  • +5.3 Keyword match
  • +3.9 Password field
  • +3.7 Brand in domain label
  • +2.2 Country mismatch
  • +1.1 ASN reputation
  • +1.1 No CSP header
  • +0.8 Young domain
  • +0.7 Brand in cert SAN
  • +0.7 Bulletproof DNS
  • +0.7 Suspicious TLD
  • +0.6 Registrar reputation
  • +0.5 Young certificate
  • +0.3 Long domain
  • +0.1 External scripts
  • Boosted to 45: Google-flagged credential form
  • Boosted to 70: Credential + brand lookalike
19 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

eBay impersonation site using a .store TLD with the brand embedded in the apex label, hosted in Hong Kong via LUCIDACLOUD LIMITED. Contains a password input form and is flagged by Google Safe Browsing for social engineering.

Brand in domain labelGoogle Safe BrowsingSame-origin form
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-28 · confidence 88%
Domain & Network
Whois
Registrar Spaceship, Inc.
Network
IP 38.55.194.55
Country Hong KongHong Kong
Hosting LUCIDACLOUD LIMITED
ASN AS139659
TLS Cert YR2
External detection Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing
Brand owner eBay
spoof@ebay.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-08-28 05:24 UTC  ·  Last refreshed 2026-08-28 09:30 UTC