io-pay.shop
Categoria: Phishing
Para usar o produto com todas as funcionalidades, tem de adquirir uma licença do Combo Cleaner. Está disponível um teste gratuito limitado de sete dias. O Combo Cleaner é propriedade e operado pela RCS LT, a empresa-mãe do PCRisk.com.
O Quttera Web Malware Removal é um serviço de subscrição paga. Os preços, planos e disponibilidade de teste são definidos pela Quttera. A Quttera é operada pela Quttera Ltd, uma empresa terceira independente sem relação com a RCS LT. O PCrisk.com pode receber uma comissão de referência quando os utilizadores aderem através desta ligação.
Descrição de io-pay.shop
io-pay.shop appears to be a Chinese-language online marketplace offering digital goods and account-related services rather than conventional physical products. Based on the page title, meta description, and homepage screenshot, the site promotes items such as Telegram services, Gmail mailboxes, phone/SIM-related services, API SMS verification, overseas accounts, and social-media or messaging-platform accounts for services including WeChat, QQ, WhatsApp, Line, Tinder, YouTube, Instagram, TikTok, Facebook, and others.
The homepage layout resembles an automated storefront with categorized listings and self-service purchasing. The branding shown in the screenshot references a "v-mall" style platform, but no clear corporate operator, business identity, or transparent ownership details are visible in the provided scan data. The domain name itself is generic and does not clearly identify a known company or established brand.
Avaliação de segurança de io-pay.shop
This website shows several risk indicators at the time of this scan. It was flagged by 4 out of 91 security engines, with multiple engines classifying it as phishing or suspicious. In addition, the malware scan reported a malicious threat level and flagged 5 files on the site, although no specific malware family names were provided. The domain is also extremely new at 6 days old, which can increase uncertainty because newly created domains are commonly used for short-lived campaigns.
The site's content also raises concern based on available data. The homepage appears to sell platform accounts, verification-related services, and messaging or social-media access products, which are commonly associated with abuse-prone activity and may be used in ways that violate platform rules or facilitate fraud. While major threat-database checks listed in the scan were clean at the time of review, that does not outweigh the combination of multi-engine phishing detections, malicious file findings, and the very recent registration date.
Based on these findings, this website may pose potential risks to visitors.
Descrição técnica
The domain is very recently registered and uses Cloudflare nameservers and reverse-proxy infrastructure, with the site resolving to a Cloudflare IP address in Canada. It presents a valid TLS certificate issued by Google Trust Services, which indicates encrypted HTTPS connectivity was available at the time of the scan. DNSSEC appears to be unsigned.
From a security perspective, the main technical concerns are not the certificate itself but the scan results: several JavaScript files and one uploaded image path were flagged during malware analysis, and the domain has little age or reputation history. The site is not ranked in Tranco, which is consistent with a low-visibility or newly launched domain.
Partilhe a sua experiência com este website. Era seguro? Encontrou algum problema?