https://greenbullet.su/
104.20.36.48 · Cloudflare, Inc.
Toronto, Canada
—
200 · 19.0s
Valid· WE1, Google Trust Services, US
COMPLETED
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
GreenBullet
Vendors
29/30
Status
partial
No KB/IOK detections were recorded for this scan.
technology | hosting | ecommerce · 4/5/2026
The page presents branding for GreenBullet, including logo assets and a site titled Portal Home - GreenBullet. However, the domain greenbullet.su is not a known or official domain for GreenBullet and is a suspicious, potentially typosquatting/brand-impersonation attempt. Visual assets and page content mimic a professional hosting/product site, but the domain and SSL details raise concern due to recent issuance and CF-backed hosting; no explicit credential harvesting form was observed in the static HTML, but a live chat widget and extensive external asset loading are present. Given the mismatch between domain and branding, this should be investigated for impersonation risk, with monitoring and potential takedown actions if corroborated by additional signals.
Capture
Stages: 3
Canonical: Late Render (+3s)
Changed: No
Credential Signals
Forms: 1
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 47
Hosts: 4
Domains: 4
Suspicious Endpoints
hxxps://greenbullet[.]su/#
No specific IOCs identified in source
The domain greenbullet.su presents GreenBullet branding, but it is not the canonical domain for GreenBullet and therefore presents impersonation risk. The page loads multiple external resources, a live chat widget, and uses a modern, feature-rich UI that could be used for credential collection if forms are later rendered by JavaScript. The SSL cert appears valid but is issued to the suspicious domain, and the IP is behind Cloudflare, which is common for phishing hosts. Given the branding mismatch and potential for deceptive impersonation, this warrants elevated scrutiny and possible action if corroborated by registrars/hosts.
Monitor