pickshot[.]app

pickshot.app entered the PhishDestroy evidence set on Jun 14, 2026. The stored content classification is generic phishing. The assembled evidence scores 83/100 (high).

Three independent sources are positive: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 3 detections among 91 engines: CRDF, Gridinsoft, SOCRadar on Aug 5, 2026 at 14:26 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 14:20 UTC. The evidence is not unanimous. AlienVault OTX listed 1 community pulse reference (not vendor detections) on May 13, 2026 at 17:10 UTC. Google Safe Browsing returned no flag on May 15, 2026 at 05:00 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 10:21 UTC. Registration records for the domain list CloudFlare, Inc. as the registrar and May 13, 2026 as the creation date. At collection time, the hostname resolved to 172.67.167.20 on AS13335 (Cloudflare, Inc.). The recorded endpoint location is Toronto, CA. The stored server header is cloudflare. Captured page title: “PickShot — 행사 사진 만장을 약 30분만에 추리는 방법”. TLS metadata lists Google Trust Services / WE1 as the certificate issuer with validity through Aug 10, 2026; checked May 13, 2026 at 17:00 UTC.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as generic phishing.