Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@wehostservers.com.
The latest stored availability evidence still shows the domain reachable; 47 hours has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
princess-mononoke[.]shop
“Princess Mononoke Shop ⚡️ Officially Licensed Princess Mononoke Merch Store”
princess-mononoke.shop — Doğrulanmamış. Marka kimliğine bürünme: PayPal; Dolandırıcılık türü: Impersonation. Kanıt özeti: VirusTotal 4/91 (alphaMountain.ai, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 80/100.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
PhishDestroy first observed princess-mononoke.shop on Aug 14, 2026. Stored content metadata identifies PayPal as the apparent target. The captured page title is “Princess Mononoke Shop ⚡️ Officially Licensed Princess Mononoke Merch Store”. Page analysis recorded additional brand references to Stripe. Stored page analysis classifies the content as impersonation. Current evidence score: 80/100 (critical).
Positive findings are stored from 3 sources: VirusTotal, MetaMask, and SEAL. On Aug 16, 2026 at 02:20 UTC, VirusTotal recorded 4 detections among 91 engines: alphaMountain.ai, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar; MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot. Non-positive and contextual checks: AlienVault OTX listed 4 community pulse references (not vendor detections) on Aug 16, 2026 at 00:08 UTC. URLQuery recorded no positive detection on Aug 14, 2026 at 04:44 UTC. Google Safe Browsing returned no flag on Aug 16, 2026 at 00:07 UTC. URLScan completed without a malicious verdict (score 0) on Aug 14, 2026 at 05:08 UTC.
The collector marked the hostname reachable on Aug 15, 2026 at 22:15 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 5.252.154.95 on AS30860 (YURTEH-AS Virtual Systems LLC, UA). The recorded endpoint location is PA. The stored server header is BunnyCDN-DE1-1223. DOM analysis on Aug 14, 2026 at 06:22 UTC returned 80/100. The evidence archive retains 4 visual captures from PhishDestroy, URLScan, URLQuery, and Cloudflare Radar. TLS metadata lists Let's Encrypt as the certificate issuer.
The content indicators and 3 positive source findings support the current PayPal-themed impersonation classification.
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Teknolojiler · 9 identified
Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.
vuejs.org %100 güvenJSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com %100 güvenGoogle Analytics is a free web analytics service that tracks and reports website traffic.
google.com %100 güvenFingerprintJS is a browser fingerprinting library that queries browser attributes and computes a hashed visitor identifier from them.
fingerprintjs.com %100 güvenLivewire is a full-stack Laravel framework for building dynamic interfaces.
laravel-livewire.com %100 güvenHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org %100 güvenVirusTotal Analizi
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of princess-mononoke.shop · checked Aug 14, 2026
Kanıtlar ve Dış Raporlar
PD-20260814-6FA4E1 Recipient: abuse@wehostservers.com Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin