# PhishDestroy domain threat record: eobuwie-eu.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/eobuwie-eu.com/ Machine-readable companion: https://phishdestroy.io/domain/eobuwie-eu.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 20:02:38 UTC - Last availability or vendor check: 2026-10-25 20:02:38 UTC - Stored record updated: 2026-10-25 21:09:45 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 104.18.74.116 - Registrar in stored WHOIS data: Hosting Concepts B.V. d/b/a Registrar.eu - Registrar country in stored WHOIS data: US - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-03-07 16:23:34 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a174a7-bbf1-73c3-910a-757ec5fab22d/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/eobuwie-eu.com - Certificate Transparency search: https://crt.sh/?q=%25.eobuwie-eu.com - Web Archive lookup: https://web.archive.org/web/*/https://eobuwie-eu.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added eobuwie-eu.com to its internal blocklist as a suspicious domain. The domain was first seen by PhishDestroy on 2026-10-25. An initial fetch on that date returned HTTP 403, while later scans recorded an HTTP 200 response with a generic "500 Internal Server Error" page title. How the scam works The detections label the site under generic phishing or malware categories, which typically indicate the possibility of credential‑harvesting forms, malicious downloads, or redirects to fraudulent services. No concrete malicious page behavior was observed on this domain, so the exact technique remains uncertain. Evidence VirusTotal scanned the domain on 2026-10-25 and reported 16 malicious detections out of 92 engines, with vendors such as BitDefender, ESET, Fortinet and others flagging it as phishing or suspicious. Google Safe Browsing checked on the same day and did not flag the domain. OTX listed four pulses referencing eobuwie-eu.com as of 2026-10-25. Cloudflare Radar flagged the site as phishing and malware on 2026-10-25, and URLScan’s engine verdict marked the URL as malicious with a score of 79, though its overall verdict was non‑malicious. Infrastructure The domain was registered on 2026-03-07 through Hosting Concepts B.V. d/b/a Registrar.eu. The recorded DNS entry pointed to 104.18.74.116, which was observed as part of Cloudflare’s network and listed in Canada. TLS was provided by Google Trust Services, valid from 2026-09-21 to 2026-12-20, and the site was behind Cloudflare’s WAF. Nameservers were etta.ns.cloudflare.com and grant.ns.cloudflare.com. What to do Visitors should avoid entering any credentials or downloading files from this domain; if credentials were entered, change them immediately and monitor accounts for unusual activity. Defenders should block eobuwie-eu.com at firewalls or proxies, add the domain to threat‑intel feeds, and review logs for any connections to the recorded IP address or hostname. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a174a7-bbf1-73c3-910a-757ec5fab22d/ Cloudflare Radar report: https://radar.cloudflare.com/scan/9775ddc2-d8ee-4652-aa43-aab8b490d2cb URLQuery report: https://urlquery.net/report/f4750e96-74eb-4301-a6ed-34cad70a18c0 Stored capture screenshot: https://i.ibb.co/YFnZxJ2v/f6d828bd4a43.png Cloudflare Radar screenshot (2026-10-25T20:37:07Z): https://screenshots.phishdestroy.io/cf/9775ddc2-d8ee-4652-aa43-aab8b490d2cb.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/f4750e96-74eb-4301-a6ed-34cad70a18c0.png URLScan screenshot (2026-10-25T19:09:34Z): https://screenshots.phishdestroy.io/us/01a17477-8890-727b-b9ab-5f89152167d8.png URLScan capture report: https://urlscan.io/result/01a17477-8890-727b-b9ab-5f89152167d8/ URLScan screenshot (2026-10-25T19:10:48Z): https://screenshots.phishdestroy.io/us/01a17478-b7fc-75bc-a66b-3a38c6e5b21e.png URLScan capture report: https://urlscan.io/result/01a17478-b7fc-75bc-a66b-3a38c6e5b21e/ URLScan screenshot (2026-10-25T19:35:42Z): https://screenshots.phishdestroy.io/us/01a1748f-b3f3-721d-84d2-a5e10c3d368d.png URLScan capture report: https://urlscan.io/result/01a1748f-b3f3-721d-84d2-a5e10c3d368d/ VirusTotal report: https://www.virustotal.com/gui/domain/eobuwie-eu.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=eobuwie-eu.com Archived copy: https://web.archive.org/web/20261025200309/https://eobuwie-eu.com/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 21:08:44 UTC ## Stored page captures - Primary capture: https://i.ibb.co/YFnZxJ2v/f6d828bd4a43.png Captured: 2026-10-25 20:02:38 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a174a7-bbf1-73c3-910a-757ec5fab22d.png Captured: 2026-10-25 20:02:38 UTC Source report: https://urlscan.io/result/01a174a7-bbf1-73c3-910a-757ec5fab22d/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/9775ddc2-d8ee-4652-aa43-aab8b490d2cb.png Captured: 2026-10-25 20:37:07 UTC Source report: https://radar.cloudflare.com/scan/9775ddc2-d8ee-4652-aa43-aab8b490d2cb SHA-256: 8460f77eb8e386521544c48675d4da0e1b2a7120fb2affa0057220575754d4eb - URLQuery: https://screenshots.phishdestroy.io/uq/f4750e96-74eb-4301-a6ed-34cad70a18c0.png Source report: https://urlquery.net/report/f4750e96-74eb-4301-a6ed-34cad70a18c0 SHA-256: 9a5bdc7b76d623c6925a341ee2a8f9f765be82c1b4d03cdb381f3ce2d89179d4 - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17477-8890-727b-b9ab-5f89152167d8.png Captured: 2026-10-25 19:09:34 UTC Source report: https://urlscan.io/result/01a17477-8890-727b-b9ab-5f89152167d8/ SHA-256: 9130c5dd1887edb59de5dc40773346a949ab155569b32da4d72008b3c79f5a38 - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17478-b7fc-75bc-a66b-3a38c6e5b21e.png Captured: 2026-10-25 19:10:48 UTC Source report: https://urlscan.io/result/01a17478-b7fc-75bc-a66b-3a38c6e5b21e/ SHA-256: 628799e8306dcdf6f793df918adf7a87503f0985c20e0a422cbd29443d57db8b - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a1748f-b3f3-721d-84d2-a5e10c3d368d.png Captured: 2026-10-25 19:35:42 UTC Source report: https://urlscan.io/result/01a1748f-b3f3-721d-84d2-a5e10c3d368d/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T20:37:45Z", "uuid": "01a174a7-bbf1-73c3-910a-757ec5fab22d", "scanned_at": "2026-10-25T20:01:57Z", "final_url": "https://eobuwie-eu.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://eobuwie-eu.com/", "from": "http://eobuwie-eu.com/", "status": 307 } ], "ip": "104.18.74.116", "ips": [ "104.18.74.116" ], "asns": [ "13335" ], "doc_hash": "6c5d74593398868b7285edba64f53c5db909a6fd2cf4052b5a617609d3b62b5d", "cookies": [ "__cf_bm" ], "tls": { "san": [ "eobuwie-eu.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "eobuwie-eu.com", "protocol": "TLS 1.3", "valid_to": "2026-12-20T12:05:05Z", "valid_from": "2026-09-21T11:05:08Z" }, "domain_age_days": 232, "apex_age_days": 232, "tls_age_days": 34, "tls_valid_days": 90, "requests": 2, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 79, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T20:37:47Z", "uuid": "9775ddc2-d8ee-4652-aa43-aab8b490d2cb", "scanned_at": "2026-10-25T20:37:07Z", "final_url": "https://eobuwie-eu.com/", "status": 200, "history": [ { "url": "https://eobuwie-eu.com/", "status": 200 } ], "dom_hash": "c2bef41e4b79f40ddbd1dd3c126b116b4d6fc79f58e379fa050a74328b92ab18", "doc_hash": "c111f11cfad227c56026726eb6b024a9e20b75a5c3d84ba9b90162dc011e18b5", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "eobuwie-eu.com", "type": "A", "value": "104.18.74.116" } ], "dnssec_valid": false, "ip": "104.18.74.116", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "created": "2026-03-07T17:23:34Z", "updated": "2026-03-07T17:44:53Z", "expires": "2027-03-07T17:23:34Z", "nameservers": [ "etta.ns.cloudflare.com", "grant.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T21:06:12Z", "analysis_at": "2026-10-25T06:34:59Z", "stats": { "timeout": 0, "harmless": 45, "malicious": 12, "suspicious": 4, "undetected": 31 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "spam", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "created": "2026-03-07T00:00:00Z", "updated": "2026-03-07T00:00:00Z", "first_seen": "2026-03-07T18:04:11Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "grant.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "etta.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "etta.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.18.74.116" } ], "dns_at": "2026-10-25T06:41:31Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "eobuwie-eu.com" ], "issuer": "Google Trust Services / WE1", "serial": "2c6763edf62db36113069fa3ef247057", "sha256": "c22afa79e8a20ea046728930322ca94dd8939045f05faae64840af52f4291c2c", "subject": "eobuwie-eu.com", "valid_to": "2026-12-20T12:05:05Z", "valid_from": "2026-09-21T11:05:08Z" }, "whois": [], "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-03-07T17:23:34Z", "registration": "2026-03-07T17:23:34Z", "registrar expiration": "2027-03-07T17:23:34Z", "last update of RDAP database": "2026-10-25T06:41:30Z" }, "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "registrar_iana_id": "1647" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T20:38:08Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "eobuwie-eu.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T20:03:09Z", "first": "2026-10-25T20:03:09Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 71413 }, "social_tags": { "title": "500 Internal Server Error", "robots": "noindex, nofollow" }, "trackers": { "requests": 5, "trackers": [ { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 15, "tls": 26, "wait": 197, "connect": 8, "download": 0 }, "response_ms": 246 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 219, "co2_grams": 0, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "173.245.58.156", "host": "etta.ns.cloudflare.com" }, { "ip": "162.159.44.130", "host": "grant.ns.cloudflare.com" } ], "zone": "eobuwie-eu.com" }, "cookies": { "cookies": [ { "name": "_bzbedc_vid" }, { "name": "_bzbedc_cvid" }, { "name": "_bzbedc_vs" }, { "name": "utm_source" }, { "name": "utm_medium" }, { "name": "order_utm_history" }, { "name": "landing_page" }, { "name": "_bzbedc_ka" }, { "name": "first_http_referer" }, { "name": "first_visit_time" }, { "name": "currency_code", "session": true }, { "name": "PHPSESSID", "session": true }, { "name": "__cf_bm", "secure": true, "http_only": true, "same_site": "None" } ] }, "location": { "ip": "104.18.74.116", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "eobuwie-eu.com" }, "dns": { "A": [ "104.18.74.116" ], "NS": [ "grant.ns.cloudflare.com", "etta.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"etta.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2413816971, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "104.18.74.116", "family": 4 }, "redirects": { "chain": [ "https://eobuwie-eu.com" ] }, "subdomains": { "count": 1, "subdomains": [ "www.eobuwie-eu.com" ] }, "whois": { "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "created": "2026-03-07T17:23:34Z", "updated": "2026-03-07T17:44:53Z", "expires": "2027-03-07T17:23:34Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "etta.ns.cloudflare.com", "grant.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } } } } ```