shiby[.]eu

The domain shiby.eu was a generic phishing site designed to harvest user credentials or sensitive information without impersonating a specific brand. It posed an elevated risk as a phishing scam, targeting victims through deceptive login pages or forms. As of the latest verification, shiby.eu has been taken offline, though it was previously active in phishing campaigns.

Technical analysis shows that shiby.eu was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, while Google Safe Browsing did not detect it. The domain appeared on 1 security blocklist, specifically PhishDestroy. It was registered through Dynadot LLC, though the creation date is not available. The site resolved to the IP address 188.114.96.3, hosted by Cloudflare (AS13335) in the US, and used Cloudflare nameservers (brynne.ns.cloudflare.com and vick.ns.cloudflare.com). The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'רק רגע...'. Technologies detected included Cloudflare and HTTP/3.

Users who may have interacted with shiby.eu should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on affected accounts. Monitor financial and login activity for signs of fraud. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts. If the site was used in a workplace or institutional setting, notify the IT or security team for further investigation.