# PhishDestroy domain threat record: eobuwie-depend.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/eobuwie-depend.shop/ Machine-readable companion: https://phishdestroy.io/domain/eobuwie-depend.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 19:04:24 UTC - Last availability or vendor check: 2026-10-26 00:19:46 UTC - Stored record updated: 2026-10-26 00:19:46 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 172.67.197.254 - Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND - Last stored HTTP status: 200 ## Evidence links - URLScan report: https://urlscan.io/result/01a17477-5207-74db-a6ea-2d1f7e1e3f14/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/eobuwie-depend.shop - Certificate Transparency search: https://crt.sh/?q=%25.eobuwie-depend.shop - Web Archive lookup: https://web.archive.org/web/*/https://eobuwie-depend.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added eobuwie-depend.shop to its internal blocklist as a suspicious domain. The domain was first observed by PhishDestroy on 2026-10-25, when a request returned HTTP 403. An earlier urlscan capture on 2026-09-17 showed a 200 response with the page title “Error - eobuwie-PL”, and Google Safe Browsing reported no flag on 2026-10-25. How the scam works The detections and blocklist entry indicate a general risk of fraudulent activity, but no specific phishing form, credential harvest, or malware delivery was observed on the captured page. Consequently, the listing reflects a broad suspicious classification rather than a confirmed scam mechanism. Evidence VirusTotal analysis on 2026-10-16 marked the domain as malicious by 13 engines and suspicious by 4 of 92, yielding 17 detections. urlscan.io captured the site on 2026-09-17; its machine‑learning engine assigned a malicious score of 99, while the overall verdict was clean. Google Safe Browsing checked on 2026-10-25 and did not flag the domain, OTX listed one pulse on the same day, and PhishDestroy’s internal list recorded the domain as blocked on 2026-10-25 with no external blocklist hits. Infrastructure The recorded IP addresses were 104.21.60.154 and 172.67.197.254 (IPv6 2606:4700:3037::ac43:c5fe), both belonging to Cloudflare, Inc. in Canada, and the TLS certificate issued by Google Trust Services was valid from 2026-09-13 to 2026-12-12. Domain registration, apex, and TLS records were four days old at the time of the latest scan, and the authoritative nameservers were tess.ns.cloudflare.com and walt.ns.cloudflare.com. What to do If you visited the site, avoid entering any credentials or personal data; if you already submitted login information, change the associated passwords promptly. Defenders should block the exact domain eobuwie-depend.shop in firewalls and monitor traffic to its recorded IP addresses. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a0aed6-2920-7428-a4a3-fa9249a0613d/ Cloudflare Radar report: https://radar.cloudflare.com/scan/409e4978-427a-4e9e-8948-9200a21eed2d Stored capture screenshot: https://urlscan.io/screenshots/01a0aed6-2920-7428-a4a3-fa9249a0613d.png Cloudflare Radar screenshot (2026-10-25T19:06:11Z): https://screenshots.phishdestroy.io/cf/409e4978-427a-4e9e-8948-9200a21eed2d.png URLScan screenshot (2026-09-15T01:30:31Z): https://screenshots.phishdestroy.io/us/01a0a2af-cdd8-75b8-bd52-1ab9b42016fd.png URLScan capture report: https://urlscan.io/result/01a0a2af-cdd8-75b8-bd52-1ab9b42016fd/ URLScan screenshot (2026-09-15T12:04:33Z): https://screenshots.phishdestroy.io/us/01a0a4f4-430b-74a5-93ff-a9270325add2.png URLScan capture report: https://urlscan.io/result/01a0a4f4-430b-74a5-93ff-a9270325add2/ URLScan screenshot (2026-09-16T13:00:16Z): https://screenshots.phishdestroy.io/us/01a0aa4d-a399-7370-a06c-71a10c806a61.png URLScan capture report: https://urlscan.io/result/01a0aa4d-a399-7370-a06c-71a10c806a61/ URLScan screenshot (2026-09-16T18:30:24Z): https://screenshots.phishdestroy.io/us/01a0ab7b-de60-7666-9e5b-d3055cfd7edb.png URLScan capture report: https://urlscan.io/result/01a0ab7b-de60-7666-9e5b-d3055cfd7edb/ VirusTotal report: https://www.virustotal.com/gui/domain/eobuwie-depend.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=eobuwie-depend.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 19:08:50 UTC ## Stored page captures - Primary capture: https://i.ibb.co/HLzsJTs4/5cd436cddf75.png Captured: 2026-10-25 19:10:39 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a17477-5207-74db-a6ea-2d1f7e1e3f14.png Captured: 2026-10-25 19:10:39 UTC Source report: https://urlscan.io/result/01a17477-5207-74db-a6ea-2d1f7e1e3f14/ - URLScan capture 2: https://screenshots.phishdestroy.io/01a0aed6-2920-7428-a4a3-fa9249a0613d.png Captured: 2026-10-25 19:04:24 UTC Source report: https://urlscan.io/result/01a17477-5207-74db-a6ea-2d1f7e1e3f14/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/409e4978-427a-4e9e-8948-9200a21eed2d.png Captured: 2026-10-25 19:06:11 UTC Source report: https://radar.cloudflare.com/scan/409e4978-427a-4e9e-8948-9200a21eed2d SHA-256: bf743a9b95120c934326524fad4031c342c95278428fd62cc5962e0c238170c2 - URLScan · 2026-09-15: https://screenshots.phishdestroy.io/us/01a0a2af-cdd8-75b8-bd52-1ab9b42016fd.png Captured: 2026-09-15 01:30:31 UTC Source report: https://urlscan.io/result/01a0a2af-cdd8-75b8-bd52-1ab9b42016fd/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - URLScan · 2026-09-15: https://screenshots.phishdestroy.io/us/01a0a4f4-430b-74a5-93ff-a9270325add2.png Captured: 2026-09-15 12:04:33 UTC Source report: https://urlscan.io/result/01a0a4f4-430b-74a5-93ff-a9270325add2/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - URLScan · 2026-09-16: https://screenshots.phishdestroy.io/us/01a0aa4d-a399-7370-a06c-71a10c806a61.png Captured: 2026-09-16 13:00:16 UTC Source report: https://urlscan.io/result/01a0aa4d-a399-7370-a06c-71a10c806a61/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - URLScan · 2026-09-16: https://screenshots.phishdestroy.io/us/01a0ab7b-de60-7666-9e5b-d3055cfd7edb.png Captured: 2026-09-16 18:30:24 UTC Source report: https://urlscan.io/result/01a0ab7b-de60-7666-9e5b-d3055cfd7edb/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T19:39:22Z", "uuid": "01a17477-5207-74db-a6ea-2d1f7e1e3f14", "scanned_at": "2026-10-25T19:09:08Z", "final_url": "https://eobuwie-depend.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://eobuwie-depend.shop/", "from": "http://eobuwie-depend.shop/", "status": 307 } ], "ip": "104.21.60.154", "domains": [ "connect.facebook.net", "analytics.tiktok.com", "fonts.gstatic.com", "analytics-ipv6.tiktokw.us" ], "ips": [ "23.50.131.221", "142.251.13.94", "23.36.162.68", "57.144.244.128", "104.21.60.154" ], "asns": [ "20940", "15169", "32934", "13335" ], "countries": [ "DE", "US" ], "doc_hash": "76820b0c9e2e20a304d8b68a6e39669b017113f0bc76c97a1d7c04bf9ecf7bff", "script_hashes": [ "749fc96cb07b13141550e29be8f92aa34aac2d030310d8ffd53650c840f917a7", "a62af29258561126c7c2449bdd589c0957fa816724f6698eac471bf24b5f5034" ], "globals": [ "_eobuwiedependshop_", "_BBCDFFG_", "themeConfig", "shop_theme", "storeConfig", "shop_config", "lang", "shop_lang", "C_SETTINGS", "_GET_C_SETTING_", "oemcart_client_browser", "oemcart_current_template", "oemcart_store_id", "oemcart_user_id", "oemcart_time_zone", "oemcart_page_ca", "oemcart_user_email", "oemcart_pv_id", "oemcart_data_from", "oemcart_user", "oemcart_currency", "oemcart_currency_code", "oemcart_currency_rate", "oemcart_currency_lcoin", "oemcart_currency_rcoin", "oemcart_currency_decimal", "oemcart_base_currency", "oemcart_base_currency_code", "oemcart_base_currency_rate", "oemcart_base_currency_lcoin", "oemcart_base_currency_rcoin", "oemcart_base_currency_decimal", "oemcart_website_domain", "oemcart_real_domain", "oemcart_site_type", "oemcart_client_country", "oemcart_protocal_type", "oemcart_website_language", "oemcart_utm_source", "oemcart_utm_medium" ], "cookies": [ "_bzhabf_vid", "_bzhabf_cvid", "_bzhabf_vs", "currency_code", "PHPSESSID", "__cf_bm", "_BBCDFFG_ua", "_BBCDFFG_pu", "_BBCDFFG_tz", "_BBCDFFG_ss", "_BBCDFFG_lang", "_BBCDFFG_vs", "_BBCDFFG_dt", "_ttp", "_tt_enable_cookie", "ttcsid", "ttcsid_D47NSCRC77U0CLRNNU20" ], "storage_keys": [ "tt_sessionId", "tt_pixel_session_index", "tt_appInfo", "lastExternalReferrer", "lastExternalReferrerTime", "error_file" ], "tls": { "san": [ "eobuwie-depend.shop" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "eobuwie-depend.shop", "protocol": "QUIC", "valid_to": "2026-12-12T09:18:17Z", "valid_from": "2026-09-13T08:18:20Z" }, "domain_age_days": 42, "apex_age_days": 42, "tls_age_days": 42, "tls_valid_days": 90, "requests": 41, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T19:08:04Z", "uuid": "409e4978-427a-4e9e-8948-9200a21eed2d", "scanned_at": "2026-10-25T19:06:11Z", "final_url": "https://eobuwie-depend.shop/", "status": 200, "history": [ { "url": "https://eobuwie-depend.shop/", "status": 200 } ], "dom_hash": "f45b39749c4661a6f42020bf6c874a2dec71c5d7ec988b48e424e21fa46436b9", "doc_hash": "d20c6258de5bc36346618584d45ffe83995edac8c0c3145eebac1448aaad3df9", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "eobuwie-depend.shop", "type": "A", "value": "172.67.197.254" }, { "name": "eobuwie-depend.shop", "type": "A", "value": "104.21.60.154" }, { "name": "eobuwie-depend.shop", "type": "AAAA", "value": "2606:4700:3037::ac43:c5fe" }, { "name": "eobuwie-depend.shop", "type": "AAAA", "value": "2606:4700:3037::6815:3c9a" } ], "dnssec_valid": false, "ip": "172.67.197.254", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T19:05:30Z", "analysis_at": "2026-10-16T03:28:18Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 13, "suspicious": 4, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "Fortinet": "spam", "Netcraft": "malicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "LevelBlue": "suspicious", "Seclookup": "malicious", "Gridinsoft": "phishing", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "Sophos": "phishing and fraud", "alphaMountain.ai": "Phishing (alphaMountain.ai)", "Forcepoint ThreatSeeker": "phishing and other frauds" }, "first_seen": "2026-09-13T10:02:12Z", "dns": [ { "ttl": 300, "type": "A", "value": "172.67.197.254" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::6815:3c9a" }, { "ttl": 21600, "type": "NS", "value": "tess.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::ac43:c5fe" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "tess.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.60.154" }, { "ttl": 21600, "type": "NS", "value": "walt.ns.cloudflare.com" } ], "dns_at": "2026-10-16T03:33:33Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "eobuwie-depend.shop" ], "issuer": "Google Trust Services / WE1", "serial": "e55f2ba1c2c23213139cf85d7e40cdc6", "sha256": "ed6c58d3989cdb8614ceda7d1fa67f80b5c566b715c48264f29764c347eb0a53", "subject": "eobuwie-depend.shop", "valid_to": "2026-12-12T09:18:17Z", "valid_from": "2026-09-13T08:18:20Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T19:08:25Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "eobuwie-depend.shop" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T19:05:12Z", "first": "2026-09-13T13:21:23Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.02, "avg_page_bytes": 42098 }, "social_tags": { "title": "Error - eobuwie-PL" }, "trackers": { "requests": 11, "trackers": [ { "name": "Facebook", "company": "Meta", "country": "US", "category": "Advertising", "requests": 2 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "Facebook Connect", "company": "Meta", "country": "US", "category": "Site Analytics", "requests": 2 }, { "name": "TikTok Analytics", "company": "ByteDance Inc", "country": "KY", "category": "Site Analytics", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 42, "wait": 375, "connect": 6, "download": 311 }, "response_ms": 736 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 428904, "co2_grams": 0.0157, "cleaner_than": 1 }, "dns_server": { "ns": [ { "ip": "172.64.33.148", "host": "walt.ns.cloudflare.com" }, { "ip": "108.162.192.227", "host": "tess.ns.cloudflare.com" } ], "zone": "eobuwie-depend.shop" }, "cookies": { "cookies": [ { "name": "_bzhabf_vid" }, { "name": "_bzhabf_cvid" }, { "name": "_bzhabf_vs" }, { "name": "currency_code", "session": true }, { "name": "PHPSESSID", "session": true }, { "name": "__cf_bm", "secure": true, "http_only": true, "same_site": "None" }, { "name": "_BBCDFFG_ua", "secure": true, "same_site": "None" }, { "name": "_BBCDFFG_pu", "secure": true, "same_site": "None" }, { "name": "_BBCDFFG_tz", "secure": true, "same_site": "None" }, { "name": "_BBCDFFG_ss", "secure": true, "same_site": "None" }, { "name": "_BBCDFFG_lang", "secure": true, "same_site": "None" }, { "name": "_BBCDFFG_vs", "secure": true, "same_site": "None" }, { "name": "_BBCDFFG_dt", "secure": true, "same_site": "None" }, { "name": "_ttp", "secure": true, "same_site": "None" }, { "name": "_tt_enable_cookie" }, { "name": "_ttp" }, { "name": "ttcsid" }, { "name": "ttcsid_D47NSCRC77U0CLRNNU20" } ] }, "location": { "ip": "2606:4700:3037::ac43:c5fe", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "eobuwie-depend.shop" }, "dns": { "A": [ "104.21.60.154", "172.67.197.254" ], "NS": [ "walt.ns.cloudflare.com", "tess.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"tess.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414978454, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3037::6815:3c9a", "2606:4700:3037::ac43:c5fe" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3037::ac43:c5fe", "family": 6 }, "redirects": { "chain": [ "https://eobuwie-depend.shop" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } } } } ```