Skip to security report
⚠️
This domain has been flagged as malicious
Security engines reporting a detection: 14. Exercise extreme caution — do not enter credentials or personal information.
Domain security and threat intelligence

ebayshopping[.]life

“For Sale Domain: ebayshopping.life”

Threat verdict Critical 92/100 evidence score
Availability Content unavailable Content was unavailable in the latest observation
VirusTotal detections: 14/93 URLQuery threat systems: 4 alerts Scam type: E-Commerce Scam
OTX: 1 ref Feb 12, 2026 1 Report Sent CDN
Evidence Summary
CRITICAL
Ref
2D6D32E8
Score
92/100

This domain, ebayshopping.life, was identified as a brand impersonation phishing site designed to deceive users into believing they are interacting with a legitimate e-commerce platform. Such sites typically mimic trusted brands to harvest login credentials, payment details, or personal information, which can then be exploited for financial fraud or identity theft. The domain's structure and naming convention closely resemble a well-known online marketplace, increasing the likelihood of successful deception among unsuspecting visitors. Analysis indicates that the domain was registered through Dynadot LLC on February 21, 2026, and resolved to the IP address 54.215.31.113, hosted on infrastructure belonging to Amazon.com, Inc. in the United States. At the time of assessment, 14 out of 95 security vendors on VirusTotal flagged the domain as malicious, and it appeared on one security blocklist. The SSL certificate was issued by Let's Encrypt, a common practice among phishing sites to appear legitimate. Despite the domain currently displaying a 'For Sale' page, historical activity suggests it was previously operational for phishing purposes. Users who visited ebayshopping.life should take immediate action to mitigate potential risks. First, reset any passwords entered on the site, particularly for accounts associated with the impersonated brand. Enable multi-factor authentication on all critical accounts to add an extra layer of security. Monitor financial statements and credit reports for unauthorized transactions or signs of identity theft. If payment details were entered, contact the relevant financial institution to report potential fraud and request card replacement. Additionally, scan the device used to access the site for malware, as phishing pages may distribute malicious payloads. Report the domain to local cybersecurity authorities or consumer protection agencies to assist in broader mitigation efforts.

VirusTotal
VirusTotal
14 det.
URLQuery
URLQuery
4 threat alerts
OTX references
DNS Security
3/14
URLScan
URLScan
TLS Certificate
R13
Observed status
Content unavailable
PhishDestroy
DestroyList
Listed
Reports Sent
1
Data coverage VirusTotal 14 / 93 URLQuery 4 threat-system alerts PhishStats checked — no match recorded OTX 1 community reference CF Radar scan completed URLScan capture stored report URLScan verdict Analysis completed DNS blocks 3/14 TLS valid certificate, 89d WHOIS not parsed Screenshot 3 captures · 3 sources Redirect chain not probed
Network Security Intelligence
DNS Provider Blocks 3 / 14
Brand Hop Cloudflare Family Cloudflare Security
Threat Detection Systems 4 alerts
Detection System Indicator Verdict Alert
OpenDNS ebayshopping.life phishing Phishing Block
DNS4EU ebayshopping.life malicious Sinkholed
Hagezi Threat Feed ebayshopping.life malicious Sinkholed
Quad9 DNS ebayshopping.life malicious Sinkholed

Threat Response Pipeline

Discovery
Checks
Reports
Availability
16/16
Sent Report Recorded
Stored sent-report record for registrar Dynadot LLC, hosting provider, 1 abuse contact
abuse@dynadot.com
Feb 12, 2026

Public Blocklist Status

Stored Capture

Page Title
For Sale Domain: ebayshopping.life
TLS Certificate
Valid transport encryption · Issued by R13 · valid for 89 days

Domain Intelligence

Domain
URLScan Verdict Analysis completed score 0 report ↗
Server / ASN cloudflare · AS16509 Amazon.com, Inc.
IP Context Cloudflare shared edge origin IP hidden Edge-IP reputation is not attributed to this domain.
Registrar Dynadot US(US)
IP Address 54.215.31.113 CDN
GeoUS San Jose, US
NetworkAS16509 · Amazon.com, Inc.
The origin IP is hidden behind a CDN proxy. Reverse-IP results for the edge address contain unrelated tenants; finding the origin requires passive DNS or certificate-transparency data.
RegistrationExpires May 18, 2026
Time to First Unavailability 33 days
What we count Elapsed time from the first stored abuse report to the first observation that the content was unavailable. This does not establish the cause.
What each report contains Stored outgoing-report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Technical detailsDNS, SSL SANs, timestamps
First DetectedFeb 12, 2026
DOM Analysisanalyzed Jul 29, 2026score 0/100
IoC Extractionscanned Aug 2, 20260 wallet · 0 Telegram IoCs
Submitted URLhttp://ebayshopping.life/
Nameserversns2.dyna-ns.net
TLS Observationvalid from Feb 27, 2026scanned Mar 15, 2026
Case ID
ICANN OVERSIGHT

Accreditation and RAA context

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accountability draft Nothing is sent automatically.
Technologies · 6 identified
Highcharts
Bootstrap
UI frameworks

Popular CSS framework for responsive, mobile-first web development.

jQuery
JavaScript libraries

Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.

HSTS
Security

HTTP Strict Transport Security — forces browsers to use HTTPS connections only.

Google Analytics
Analytics

Web analytics service tracking website traffic and user behavior.

marketingplatform.google.com
Cloudflare
CDN

Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.

www.cloudflare.com
Detected via Cloudflare Radar · Wappalyzer engine
Report This Domain Submit evidence & help protect others

VirusTotal Analysis

14 / 93 security vendors flagged this domain
View on VT
Last analyzed
ADMINUSLabs
alphaMountain.ai
BitDefender
Cluster25
CyRadar
ESET
Forcepoint ThreatSeeker
G-Data
Gridinsoft
Kaspersky
Lionic
SOCRadar
Sophos
Webroot

Archived Evidence

Wayback Machine Snapshot
A historical snapshot is available for evidence review
View Archive
Site Performance Analysis

Google PageSpeed Insights — mobile performance audit of ebayshopping.life · checked Mar 2, 2026

56
Needs Work
Performance
FCP
7.62s
First Contentful Paint
LCP
15.15s
Largest Contentful Paint
CLS
0.046
Cumulative Layout Shift
TBT
106ms
Total Blocking Time
SI
7.62s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor

Evidence & External Reports

Submitted Evidence Snapshot
Sent: Ledger records: 1 Case ID: PD-20260212-E05180 Recipient: abuse@dynadot.com
URLScan evidence VirusTotal evidence URLQuery evidence Screenshot 174.3 KB

Were You Affected by This Site?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

Europol
Find the official reporting channel for your EU country
National police directory
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory
Template-based draft • optional AI wording assistance requires separate consent Review and submit it yourself

Check Any Domain

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Scan Now

Report Phishing

Submit suspicious domains to our threat database — protect the community

Report

Live Threat Feed

Recent phishing reports and observed availability changes

Monitor

Stay Informed, Stay Safe

Monitor live threats or contest this listing if you believe it's a false positive

Live Threat Feed Appeal This Listing
HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html
<iframe
  src="https://phishdestroy.io/embed/domain/ebayshopping.life"
  title="PhishDestroy threat report for ebayshopping.life"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

A Very Sincere Thank-You Note

Satirical draft generator

Recipient
Fee context

Satirical draft. Fee figures are estimates; exact attribution to this domain is not claimed.