globafas.shop
Kategoria: Phishing
Aby korzystać z produktu z pełną funkcjonalnością, musisz kupić licencję na Combo Cleaner. Dostępny jest ograniczony siedmiodniowy bezpłatny okres próbny. Combo Cleaner należy do RCS LT i jest obsługiwany przez tę firmę, spółkę macierzystą PCRisk.com.
Opis globafas.shop
The domain globafas.shop appears to host a Portuguese-language page themed around collecting banking details. The visible content references OLX and asks visitors to submit personal and financial information such as full name, phone number, CPF, date of birth, and PIX key details. Although the page title is set to "Google," the screenshot content does not appear to match that title, which may indicate misleading page metadata or a hastily assembled template.
Based on the screenshot and linked assets, the site appears to be built with common web components and frontend libraries rather than representing a well-established branded service. The domain itself does not clearly identify a known organization, and the available registration data does not show a long operating history. At the time of this scan, the page appears to function more as a data-collection form than as a full business or informational website.
Ocena bezpieczeństwa globafas.shop
At the time of this scan, no malware detections were reported by 0 out of 92 security engines, and the checked blacklist databases were clean. The malware scan also reported no flagged files on the site itself. However, one referenced external domain was associated with a generic suspicious heuristic, which is a relatively low-confidence signal on its own and does not by itself confirm malicious activity.
That said, there are several contextual concerns not captured by malware engines alone. The domain is extremely new, with an age of 0 days, has no established traffic ranking, and the page requests sensitive banking and identity information while visually referencing a known marketplace brand. The mismatch between the page title ("Google") and the visible OLX-themed content may also be a warning sign. Based on the available data, the site may be attempting to collect financial information under branding that may not belong to the domain owner.
Based on these findings, this website may pose potential risks to visitors, especially if asked to submit personal or banking details.
Opis techniczny
The site was reachable over HTTPS with a valid Let's Encrypt certificate at the time of this scan. DNSSEC appears to be unsigned, and the domain uses nameservers associated with a parking-oriented DNS provider. Hosting appears to be with a mainstream shared hosting provider in Indonesia, and the observed asset structure suggests a WordPress-based or template-driven frontend using common JavaScript and CSS libraries.
From a technical risk perspective, the strongest concerns are not malware indicators but operational signals: a brand-new domain, limited reputation history, unsigned DNSSEC, and a page designed to collect sensitive financial data. These factors do not prove abuse, but they may increase uncertainty and reduce trust in the site at the time of review.
Podziel się swoimi doświadczeniami z tą witryną. Czy była bezpieczna? Czy wystąpiły jakieś problemy?