Phishing detection: seureonline.shop

SEUR
https://seureonline.shop Access site
Screenshot
Screenshot of seureonline.shop
Investigate
Domain seureonline.shop1 CT host on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 193.9.48.156
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://seureonline.shop
urlscan Wayback archive.today
Cert Let's Encrypt
crt.sh Censys Google CT
Phishunt analysis Beta
29 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 urlscan.io
  • +4.5 Brand in title
  • +3.7 Brand in domain label
  • +2.2 Country mismatch
  • +1.6 Favicon (kit)
  • +1.1 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.8 Young domain
  • +0.7 Brand in cert SAN
  • +0.7 Suspicious TLD
  • +0.6 Registrar reputation
  • +0.3 Free CA
  • +0.3 Long domain
16 signals fired · detector v3.0.0
AI analysis AIBeta
Delivery scam

Site impersonates SEUR, a Spanish courier service, using a domain embedding the brand under a .shop TLD. The favicon matches known SEUR phishing kit assets, the TLS certificate contains the brand name, and urlscan confirms it as malicious; likely harvesting delivery-related personal data.

Favicon (kit)Brand in cert SANBrand in domain label
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-26 · confidence 83%
Domain & Network
Whois
Registrar Dynadot Inc.
Network
IP 193.9.48.156
Country United StatesUnited States
Hosting Malakmadze Web LLC
ASN AS199242
TLS Cert Let's Encrypt
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-08-26 06:11 UTC  ·  Last refreshed 2026-08-31 09:30 UTC