Security Scan Report: service.ebayshop.shop

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 15 HTTP transactions. The main domain is ebayshop.shop.

Submitted URL: https://service.ebayshop.shop

AI Security Verdict

Confirmed Scam

Confidence: 92%

10
Risk Score

Safe Browsing social-engineering hit plus a live login form on ebayshop.shop that captures a password and Google Authenticator code — a credential/2FA phishing page impersonating eBay. Do not enter credentials.

Risk Factors (5)
Google Safe Browsing Social Engineering (phishing) detection
Credential + 2FA/OTP harvesting login form on a non-brand domain
Brand-impersonating hostname (ebayshop.shop) that is unranked and not an official brand property
Two-stage login (password then authenticator code) designed to defeat two-factor protection
Hidden uniqid, skey and _csrf_ fields consistent with a prepackaged phishing kit
Domain age information unavailable

Details

Page Title

客服登录 · OmniChat

Scan Type

public

Domain Name Analysis

Within the commerce-oriented generic top-level domain (.shop), 'service.ebayshop.shop' is registered and includes subdomain 'service'. Its registrable label 'ebayshop' stretches across 8 characters holding three vowels versus 5 consonants. Splitting it apart reveals 2 words: ebay, shop. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

OmniChat «ic

Page Load Overview

1.85s
Total Load Time
1022 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh
Text Length:131 chars
Detector Agreement:50%
Language mismatch: Declared as zh but detected as en

All Detected Languages

🇺🇸en(60%)🇨🇳zh(40%)

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
152--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19E62730D283F3E2564376493D14F623F616ABE17C620DAB43D5C06484FE1E2E36B6B99

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:PSPxM3utgpFOw1DvkLfvRgWsDOUOgzn2ecuSvaG9eajObEZDtIXTD4PnpdxALKxv:PgM3uaECT1TJJDKpI4/ndtN3ZiO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15499:OAuAQqBbRSUICBLCBTQszoAFGSCQIAz0CdwYSwSAgmUgyREaEBApKDwuDVC1hdBEpsAQA5AMAXwWAIFnr0rKEBQk3gkASKwB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1e606e000c3c3f1c
Perceptual Hash:9163ac9b3e8c99b2
Difference Hash:dcc9cad2d9f8e2ac
Wavelet Hash:3e687e08043e3f5e
Color Hash:38c00018000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data