# meteorshop.biz — SUSPICIOUS

> meteorshop.biz is an active generic phishing domain with 1/95 VirusTotal flags. Users should avoid interacting to prevent credential theft.

## Summary
The domain meteorshop.biz is currently active and poses an elevated risk due to its involvement in generic phishing campaigns. This threat involves deceptive tactics to steal sensitive user information such as login credentials or financial data.

According to VirusTotal, 1 out of 95 security vendors flagged meteorshop.biz, indicating some recognition of malicious intent. The domain was registered on May 31, 2021, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and it resolves to the IP address 91.206.71.128. It uses an SSL certificate issued by Google Trust Services, which may falsely imply legitimacy to unsuspecting users. There is no widespread blocklist coverage yet, but the existing flags and registration details warrant caution.

To mitigate risks from this type of phishing threat, users should avoid clicking on links or entering credentials on meteorshop.biz. Organizations should consider blocking this domain at network perimeters and educating users about phishing risks. Continuous monitoring of this domain for additional threat intelligence is advised to prevent potential compromise from credential harvesting or fraud.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2021-05-31 18:19:35
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 91.206.71.128

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2e5d0dd0-dbee-4d96-be00-725688fc4303
- PhishDestroy: https://phishdestroy.io/domain/meteorshop.biz/
- LLM endpoint: https://phishdestroy.io/domain/meteorshop.biz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/meteorshop.biz/
Last updated: 2026-03-26