io-pay.shop
Kategoria: Phishing
Aby korzystać z produktu z pełną funkcjonalnością, musisz kupić licencję na Combo Cleaner. Dostępny jest ograniczony siedmiodniowy bezpłatny okres próbny. Combo Cleaner należy do RCS LT i jest obsługiwany przez tę firmę, spółkę macierzystą PCRisk.com.
Quttera Web Malware Removal to płatna usługa subskrypcyjna. Ceny, plany i dostępność wersji próbnej ustala Quttera. Quttera jest obsługiwana przez Quttera Ltd, niezależną firmę zewnętrzną niezwiązaną z RCS LT. PCrisk.com może otrzymać prowizję za polecenie, gdy użytkownicy zarejestrują się przez ten link.
Opis io-pay.shop
io-pay.shop appears to be a Chinese-language online marketplace offering digital goods and account-related services rather than conventional physical products. Based on the page title, meta description, and homepage screenshot, the site promotes items such as Telegram services, Gmail mailboxes, phone/SIM-related services, API SMS verification, overseas accounts, and social-media or messaging-platform accounts for services including WeChat, QQ, WhatsApp, Line, Tinder, YouTube, Instagram, TikTok, Facebook, and others.
The homepage layout resembles an automated storefront with categorized listings and self-service purchasing. The branding shown in the screenshot references a "v-mall" style platform, but no clear corporate operator, business identity, or transparent ownership details are visible in the provided scan data. The domain name itself is generic and does not clearly identify a known company or established brand.
Ocena bezpieczeństwa io-pay.shop
This website shows several risk indicators at the time of this scan. It was flagged by 4 out of 91 security engines, with multiple engines classifying it as phishing or suspicious. In addition, the malware scan reported a malicious threat level and flagged 5 files on the site, although no specific malware family names were provided. The domain is also extremely new at 6 days old, which can increase uncertainty because newly created domains are commonly used for short-lived campaigns.
The site's content also raises concern based on available data. The homepage appears to sell platform accounts, verification-related services, and messaging or social-media access products, which are commonly associated with abuse-prone activity and may be used in ways that violate platform rules or facilitate fraud. While major threat-database checks listed in the scan were clean at the time of review, that does not outweigh the combination of multi-engine phishing detections, malicious file findings, and the very recent registration date.
Based on these findings, this website may pose potential risks to visitors.
Opis techniczny
The domain is very recently registered and uses Cloudflare nameservers and reverse-proxy infrastructure, with the site resolving to a Cloudflare IP address in Canada. It presents a valid TLS certificate issued by Google Trust Services, which indicates encrypted HTTPS connectivity was available at the time of the scan. DNSSEC appears to be unsigned.
From a security perspective, the main technical concerns are not the certificate itself but the scan results: several JavaScript files and one uploaded image path were flagged during malware analysis, and the domain has little age or reputation history. The site is not ranked in Tranco, which is consistent with a low-visibility or newly launched domain.
Podziel się swoimi doświadczeniami z tą witryną. Czy była bezpieczna? Czy wystąpiły jakieś problemy?