Phishing detection: ebay-c.com

eBay
http://ebay-c.com Access site
Screenshot
Screenshot of ebay-c.com
Investigate
Domain ebay-c.com3 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 43.131.31.67
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://ebay-c.com
urlscan Wayback archive.today
Cert DNSPod DV TLS RSA CA G1
crt.sh Censys Google CT
Phishunt analysis Beta
39 medium suspicion suspiciousheuristic risk score · not a probability
Keyword matchBrand in domain labelurlscan.io
19 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates eBay via the typosquat domain ebay-c.com, with the eBay brand embedded in the TLS certificate SAN. Hosted on Tencent infrastructure in Germany with a country mismatch. A password input form is present and the site is confirmed malicious by OpenPhish and urlscan.

Brand in cert SANPassword fieldCountry mismatch
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 90%
Domain & Network
Whois
Registrar DNSPod, Inc.
Network
IP 43.131.31.67
Country GermanyGermany
Hosting Tencent Building, Kejizhongyi Avenue
ASN AS132203
TLS Cert DNSPod DV TLS RSA CA G1
External detection OpenPhish urlscan.io
CleanGoogle Safe Browsing · PhishTank · TweetFeed
Related infrastructure Betasuspected links from shared infrastructure, not attribution
ebay-v.com 42 same nameservers similar name same registrar same screenshot
active 2026-05-04
Top 1 of 1 related · rebuilt daily · corr-1.2.0 · related infrastructure API
Report this phishing
Network / ASN Tencent Building, Kejizhongyi Avenue
tencent_noc@tencent.com Web form
Brand owner eBay
spoof@ebay.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-04-16 13:01 UTC  ·  Last refreshed 2026-08-04 13:30 UTC