Is c.gmail91.shop safe?

No. MalwareAnalyzer scanned c.gmail91.shop on 23 Aug 2026 and returned a suspicious verdict with a score of 33 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was c.gmail91.shop checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

c.gmail91.shop - suspicious URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned c.gmail91.shop and returned a suspicious verdict (score 33), categorised as phishing. The page resolved to 149.88.85.238 on PSINet, Inc. in HK. The domain was registered 206 days ago through GNAME.COM PTE. LTD.. 1 domain and 1 IP were contacted, over 28 HTTP requests. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 33) · Confidence 39%
Scanned URL: https://c.gmail91.shop/
Domain: c.gmail91.shop · IP: 149.88.85.238 · AS142032 · HK
Server: nginx
HTTP status: 200 · text/html
Registrar: GNAME.COM PTE. LTD. · domain age 206 days · created 2026-01-29
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Nov 21 02: · subject CN=c.gmail91.shop
HTTP requests captured: 28 · outgoing links: 18
Scan tier: standard · observed 2026-08-23 19:09:13 UTC

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Domain impersonates gmail (combosquat)
Certificate issued < 48h ago

Detected technologies

Nginx

Contacted infrastructure

149.88.85.238 - AS142032 PSINet, Inc. (Hong Kong)

Observed indicators

c.gmail91.shop
149.88.85.238
https://c.gmail91.shop/
https://c.gmail91.shop/assets/index-BStGJ7T4.js
https://c.gmail91.shop/assets/vendor-vue-i18n-DAlov-RK.js
https://c.gmail91.shop/assets/index-SurcPjex.css

Questions about c.gmail91.shop

Is c.gmail91.shop safe?: No. MalwareAnalyzer scanned c.gmail91.shop on 23 Aug 2026 and returned a suspicious verdict with a score of 33 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was c.gmail91.shop checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of c.gmail91.shop

Scanned on MalwareAnalyzer by Cyble · Open interactive scan