mass.report
Scan Intelligence Report0/100
medium Risk
bricksandminifigs.com
https://bricksandminifigs.com/
IP
23.185.0.4 · Pantheon
Location
San Francisco, United States
Domain Age
6346 days
HTTP
200 · 26.9s
SSL
Valid· R12, Let's Encrypt, US
Status
COMPLETED
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
Bricks & Minifigs
Vendors
29/30
Status
partial
✓ bitdefender✓ brightcloud✓ polyswarm✓ yandex✓ avast✓ eset✓ avg✓ microsoft✗ norton✓ apple✓ sophos✓ apwg✓ urlquery✓ phishreport✓ emsisoft✓ isitphish✓ spamhaus✓ openphish✓ urlscan✓ fortiguard✓ cisa✓ netcraft✓ phishtank✓ virustotal✓ drweb✓ urlabuse✓ kaspersky✓ google✓ mcafee✓ threatyeti
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
Bricks & Minifigs
UnknownE-Commerce · 7/19/2026
Summary
The page at bricksandminifigs.com presents branding for Bricks & Minifigs (LEGO minifigures, sets, bricks) with actual site content. The page shows legitimate LEGO-themed branding and a store-style layout; however, the domain is not a canonical LEGO brand domain and the evidence suggests off-domain submission endpoints and heavy analytics/scripts. Visuals in the screenshot strongly resemble Bricks & Minifigs branding rather than an impersonation of a major brand like PayPal or Google. While credential harvesting impersonation is not evident from the static HTML, the presence of off-domain endpoints and multiple third-party trackers warrants cautious monitoring for potential misuse, but there is no definitive credential-theft phishing signal from the captured data.
Evidence Summary
▸Observed 3 capture stage(s); canonical stage is late_render_3s.
▸Off-domain submission or API endpoints observed: https://2532c1-2.myshopify.com/api/2025-01/graphql.json.
▸Distinctive asset clues: jquery-migrate.min.js, jquery.min.js, tribe-events-pro-mini-calendar-block.css, variables-skeleton.css, Straight-BAM-Logo-1080-01.png, Rebuild-Icon.png.
Capture
Stages: 3
Canonical: Late Render (+3s)
Changed: No
Credential Signals
Forms: 1
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 176
Hosts: 26
Domains: 18
Suspicious Endpoints
hxxps://2532c1-2[.]myshopify[.]com/api/2025-01/graphql.json
hxxps://bricksandminifigs[.]com/
Off-Domain Posts
hxxps://2532c1-2[.]myshopify[.]com/api/2025-01/graphql.json
Observed Signals (0)
Observed Indicators (1)
▸Suspicious off-domain endpoint: https://2532c1-2.myshopify.com/api/2025-01/graphql.json
Risk AssessmentUsed in abuse reports
The page presents Bricks & Minifigs branding on bricksandminifigs.com, suggesting a first-party retail site rather than a spoofed login page for another brand. However, the scan reveals numerous third-party trackers, a Shopify.graphql endpoint on an off-domain, and a high volume of external resources, which increases risk of data exfiltration or user tracking. The presence of a valid SSL certificate from Let's Encrypt with subdomains indicates legitimate operation, but the off-domain API endpoint and extensive analytics integration warrant closer monitoring for potential misuse or data leakage. Given the evidence, treat this as a first-party site with significant tracking load and potential risky integrations; no definitive credential-phishing behavior is observed.
Recommended Action
Monitor
Cross-Reference9
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API