MALICIOUS — CRITICAL
glowremotely[.]com
The domain glowremotely.com is currently configured to display a page titled "Shopee," indicating an attempt to impersonate the legitimate e-commerce platform Shopee.
- VirusTotal
- 16/91
- Blocklists
- No stored match
- Kullanılabilirlik
- Bilinen son aktif · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@netsec.com.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
glowremotely.com — Bilinen son aktif (HTTP 200). Marka kimliğine bürünme: ShopeePay; Dolandırıcılık türü: Impersonation. Kanıt özeti: VirusTotal 16/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); URLQuery 10 alerts; CF Radar malicious; PhishDestroy score 100/100. Kayıt kuruluşu: TuringSign.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Evidence Analysis
glowremotely.com Phishing Intelligence Report - PhishDestroy
Glowremotely.com is a generic phishing domain flagged by 17 of 95 VirusTotal vendors and listed on one security blocklist, raising concerns about its safety.
The domain glowremotely.com is currently configured to display a page titled "Shopee," indicating an attempt to impersonate the legitimate e-commerce platform Shopee. This domain poses a threat as a phishing or fraudulent site designed to deceive visitors into providing sensitive information, such as login credentials or financial details, under the guise of the Shopee brand.
Technical evidence shows the domain was flagged by 17 out of 95 VirusTotal vendors, with detections from ADMINUSLabs, alphaMountain.ai, Chong Lua Dao, Cluster25, and CRDF. It is registered with TuringSign Inc. d/b/a Cosmotown and was created on 2026-03-25. The site resolves to IP address 182.16.78.66, hosted in Hong Kong by Netsec Limited, and uses an SSL certificate issued by Let's Encrypt with fingerprint E7.
The site is currently offline and inaccessible. Based on the low GridinSoft trust score of 0/100 and detection by multiple security vendors, the risk level is high. Users should avoid any interaction with this domain, as it is confirmed to be associated with malicious activity.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Veri kapsamı12 recorded checks
Ağ Güvenliği İstihbaratı
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | kosmetikskin.net |
malicious | Sinkholed |
| Cloudflare DNS | kosmetikskin.net |
malicious | Sinkholed |
| DNS4EU | kosmetikskin.net |
malicious | Sinkholed |
| OpenDNS | kosmetikskin.net |
phishing | Phishing Block |
| Hagezi Threat Feed | kosmetikskin.net |
malicious | Sinkholed |
| Cloudflare DNS | glowremotely.com |
malicious | Sinkholed |
| DNS4EU | glowremotely.com |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | glowremotely.com |
malicious | Sinkholed |
| OpenDNS | glowremotely.com |
phishing | Phishing Block |
| DigiCert UltraDNS | glowremotely.com |
malicious | Sinkholed |
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknolojiler · 6 identified
Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.
vuejs.org %100 güvenNginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org %100 güvenCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com %100 güvenSwiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.
swiperjs.com %100 güvenjQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com %100 güvenVirusTotal Analizi
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of glowremotely.com · checked Mar 26, 2026
Kanıtlar ve Dış RaporlarIndependent lookups and source reports
PD-20260325-E109AB Recipient: abuse@netsec.com Victim safety and official reportingImmediate actions and verified reporting channels
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.