shopflairly[.]com

PhishDestroy has flagged shopflairly.com as an active generic phishing domain under investigation, categorized as a credential theft campaign targeting unsuspecting users. The domain was registered on October 14, 2025, through Fewmoretaps OU d/b/a Trustname.com, and resolves to IP address 104.21.90.27 with a Google Trust Services SSL certificate. Notably, 2 out of 95 VirusTotal scans have detected malicious activity, indicating evasiveness against current detection engines.

This domain’s low detection rate and recent registration (October 14, 2025) raise concerns about its potential to deceive users, particularly as it presents itself as a legitimate e-commerce platform. The use of Google Trust Services for its SSL certificate adds a veneer of legitimacy, while the underlying infrastructure (IP 104.21.90.27) is associated with known malicious activity. The registrar, Fewmoretaps OU d/b/a Trustname.com, has been linked to multiple phishing operations, further compounding the risk.

To mitigate exposure, users should avoid interacting with shopflairly.com or any associated links. Organizations are advised to implement DNS-based blocking for this domain and report it to threat intelligence platforms. Immediate credential rotation is recommended if any interaction has occurred. Exercise heightened scrutiny for emails or messages referencing this domain.