promo[.]getsmobile[.]shop

This domain, promo.getsmobile.shop, was identified as part of a phishing campaign targeting users with a giveaway-themed scam. The domain was registered through NameCheap, Inc. and created on November 29, 2023. Infrastructure analysis reveals that the domain used nameservers cdns1.main-hosting.eu and cdns2.main-hosting.eu, and resolved to the IP address 212.1.210.228, which is located in the United States and attributed to AS47583 Hostinger International Limited. The domain appears on one security blocklist and has been flagged by 16 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion among threat detection platforms.

The page title, 'Getsmobile - Sorteo iPhone Banco de Bogotá,' suggests that the campaign was designed to lure users into participating in a fake iPhone giveaway associated with Banco de Bogotá. However, the exact content and structure of the webpage have not been analyzed, and the domain is currently offline. The lack of an SSL certificate adds to the security concerns, as legitimate sites typically use HTTPS to secure data.

Gridinsoft has assigned this domain a trust score of 0 out of 100, reflecting a complete lack of trust in the site's legitimacy. Defenders should be vigilant and monitor for any attempts to revive the domain, as the elevated risk level and historical phishing indicators suggest that this infrastructure may be re-used in future attacks. Additionally, users should be educated to avoid clicking on links or entering personal information on unverified giveaway sites, especially those associated with major financial institutions like Banco de Bogotá.