depop[.]form5591[.]sbs

This domain, depop.form5591.sbs, is a fraudulent site likely designed to impersonate the Depop brand. The page title "Just a moment..." indicates it may have been using a Cloudflare challenge page, either as a cloaking mechanism to evade automated analysis or as a simple placeholder before redirecting victims to a phishing or credential harvesting page. The threat posed is phishing, where users are tricked into entering login credentials or personal information, risking account compromise and financial fraud.

Technical analysis shows the site was flagged by 6 out of 95 VirusTotal vendors, including alphaMountain.ai, CyRadar, Fortinet, SOCRadar, and Trustwave. It is registered with Web Commerce Communications Limited and hosted on IP 104.21.5.95, which belongs to AS13335 Cloudflare, Inc. in the United States. The domain was created on 2025-11-28, has no SSL certificate, and uses nameservers aldo.ns.cloudflare.com and desi.ns.cloudflare.com. GridinSoft gives it a trust score of 0/100.

The site is currently down or offline, reducing immediate risk to users. However, its recent creation date and high detection rate indicate a malicious intent. The risk level is high for any user who might encounter it while active, as it directly targets Depop users for credential theft.