# PhishDestroy domain threat record: eobuwie-reliance.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/eobuwie-reliance.shop/ Machine-readable companion: https://phishdestroy.io/domain/eobuwie-reliance.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 19:04:26 UTC - Last availability or vendor check: 2026-10-26 00:19:45 UTC - Stored record updated: 2026-10-26 00:19:45 UTC - VirusTotal detections in the stored snapshot: 8/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 104.21.3.205 - Registrar in stored WHOIS data: Dynadot Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-09-11 11:01:46 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a17477-a27c-7787-8d4c-4101afe5f40e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/eobuwie-reliance.shop - Certificate Transparency search: https://crt.sh/?q=%25.eobuwie-reliance.shop - Web Archive lookup: https://web.archive.org/web/*/https://eobuwie-reliance.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added eobuwie-reliance.shop to its internal blocklist on 2026-10-25 following an automated detection that marked a URLScan report as malicious. The intake record notes that a page fetch on that date returned HTTP 403 and displayed a Cloudflare challenge, preventing direct content analysis. Google Safe Browsing checked the domain on the same day and did not flag it. How the scam works The available detections classify the site under phishing and malware categories, indicating a typical risk where attackers impersonate legitimate brands to harvest credentials or other sensitive data. No specific malicious behavior was observed on the page itself, so the listing reflects a general phishing threat rather than a confirmed scheme. Evidence URLScan captured the site on 2026-10-12 and assigned a malicious verdict with a 100 % score, labeling it as a fake shop phishing site. VirusTotal scanned the domain on 2026-10-25, reporting 8 detections across 92 engines: 3 malicious and 5 suspicious, from vendors such as Kaspersky (phishing) and Fortinet (spam). Google Safe Browsing reported no flag, OTX showed zero pulses, and external blocklists listed none, while PhishDestroy’s own internal list marks the domain as malicious. Infrastructure The domain was registered 31 days before the first observation and uses Cloudflare’s CDN, resolving to IP addresses 172.67.131.45 and 104.21.3.205, both associated with Cloudflare, Inc. in Canada. TLS was issued by Google Trust Services on 2026-09-11, valid until 2026-12-10, and DNSSEC is not enabled. What to do Treat the site as untrusted; avoid entering any credentials, personal information, or payment details. If you have already submitted credentials, change the associated passwords and monitor accounts for suspicious activity. Defenders should block eobuwie-reliance.shop at the network perimeter and review any logs for connections to the recorded IPs or hostnames. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1306b-79eb-71f9-9b7d-52bf84cc4805/ Cloudflare Radar report: https://radar.cloudflare.com/scan/b593714a-8556-4653-875a-58041501497d Stored capture screenshot: https://urlscan.io/screenshots/01a1306b-79eb-71f9-9b7d-52bf84cc4805.png Cloudflare Radar screenshot (2026-10-25T19:06:10Z): https://screenshots.phishdestroy.io/cf/b593714a-8556-4653-875a-58041501497d.png URLScan screenshot (2026-09-13T06:11:09Z): https://screenshots.phishdestroy.io/us/01a09963-fa4e-73d8-b41c-554a313cb074.png URLScan capture report: https://urlscan.io/result/01a09963-fa4e-73d8-b41c-554a313cb074/ URLScan screenshot (2026-10-11T18:15:23Z): https://screenshots.phishdestroy.io/us/01a12c2d-2019-74ef-aa0f-12175d8b8caa.png URLScan capture report: https://urlscan.io/result/01a12c2d-2019-74ef-aa0f-12175d8b8caa/ VirusTotal report: https://www.virustotal.com/gui/domain/eobuwie-reliance.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=eobuwie-reliance.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 19:08:29 UTC ## Stored page captures - Primary capture: https://i.ibb.co/HLzsJTs4/5cd436cddf75.png Captured: 2026-10-25 19:11:14 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a17477-a27c-7787-8d4c-4101afe5f40e.png Captured: 2026-10-25 19:11:14 UTC Source report: https://urlscan.io/result/01a17477-a27c-7787-8d4c-4101afe5f40e/ - URLScan capture 2: https://screenshots.phishdestroy.io/01a1306b-79eb-71f9-9b7d-52bf84cc4805.png Captured: 2026-10-25 19:04:26 UTC Source report: https://urlscan.io/result/01a17477-a27c-7787-8d4c-4101afe5f40e/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/b593714a-8556-4653-875a-58041501497d.png Captured: 2026-10-25 19:06:10 UTC Source report: https://radar.cloudflare.com/scan/b593714a-8556-4653-875a-58041501497d SHA-256: bf743a9b95120c934326524fad4031c342c95278428fd62cc5962e0c238170c2 - URLScan · 2026-09-13: https://screenshots.phishdestroy.io/us/01a09963-fa4e-73d8-b41c-554a313cb074.png Captured: 2026-09-13 06:11:09 UTC Source report: https://urlscan.io/result/01a09963-fa4e-73d8-b41c-554a313cb074/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - URLScan · 2026-10-11: https://screenshots.phishdestroy.io/us/01a12c2d-2019-74ef-aa0f-12175d8b8caa.png Captured: 2026-10-11 18:15:23 UTC Source report: https://urlscan.io/result/01a12c2d-2019-74ef-aa0f-12175d8b8caa/ SHA-256: 692c198d2453221451e612eceed8a73a9f62ccc6c4c160cfa301aecbf1212c95 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T19:39:22Z", "uuid": "01a17477-a27c-7787-8d4c-4101afe5f40e", "scanned_at": "2026-10-25T19:09:28Z", "final_url": "https://eobuwie-reliance.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://eobuwie-reliance.shop/", "from": "http://eobuwie-reliance.shop/", "status": 307 } ], "ip": "104.21.3.205", "domains": [ "connect.facebook.net", "analytics.tiktok.com", "fonts.gstatic.com", "analytics-ipv6.tiktokw.us" ], "ips": [ "23.40.52.119", "142.250.195.163", "23.33.238.111", "157.240.8.23", "104.21.3.205" ], "asns": [ "20940", "15169", "32934", "13335" ], "countries": [ "AU", "US" ], "doc_hash": "0447cb2e531d069d6a5d805f8bfd8aedee9da447ccf913c176d203f739c8b348", "script_hashes": [ "749fc96cb07b13141550e29be8f92aa34aac2d030310d8ffd53650c840f917a7", "a62af29258561126c7c2449bdd589c0957fa816724f6698eac471bf24b5f5034" ], "globals": [ "_eobuwierelianceshop_", "_BBCCFIH_", "themeConfig", "shop_theme", "storeConfig", "shop_config", "lang", "shop_lang", "C_SETTINGS", "_GET_C_SETTING_", "oemcart_client_browser", "oemcart_current_template", "oemcart_store_id", "oemcart_user_id", "oemcart_time_zone", "oemcart_page_ca", "oemcart_user_email", "oemcart_pv_id", "oemcart_data_from", "oemcart_user", "oemcart_currency", "oemcart_currency_code", "oemcart_currency_rate", "oemcart_currency_lcoin", "oemcart_currency_rcoin", "oemcart_currency_decimal", "oemcart_base_currency", "oemcart_base_currency_code", "oemcart_base_currency_rate", "oemcart_base_currency_lcoin", "oemcart_base_currency_rcoin", "oemcart_base_currency_decimal", "oemcart_website_domain", "oemcart_real_domain", "oemcart_site_type", "oemcart_client_country", "oemcart_protocal_type", "oemcart_website_language", "oemcart_utm_source", "oemcart_utm_medium" ], "cookies": [ "_bzhabf_vid", "_bzhabf_cvid", "_bzhabf_vs", "PHPSESSID", "__cf_bm", "_BBCCFIH_ua", "_BBCCFIH_pu", "_BBCCFIH_tz", "_BBCCFIH_ss", "_BBCCFIH_lang", "_BBCCFIH_vs", "_BBCCFIH_dt", "_ttp", "_tt_enable_cookie", "ttcsid", "ttcsid_D47NSCRC77U0CLRNNU20" ], "storage_keys": [ "lastExternalReferrer", "lastExternalReferrerTime", "tt_sessionId", "tt_pixel_session_index", "tt_appInfo", "error_file" ], "tls": { "san": [ "eobuwie-reliance.shop" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "eobuwie-reliance.shop", "protocol": "TLS 1.3", "valid_to": "2026-12-10T14:12:36Z", "valid_from": "2026-09-11T13:12:40Z" }, "domain_age_days": 44, "apex_age_days": 44, "tls_age_days": 44, "tls_valid_days": 90, "requests": 39, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T19:07:52Z", "uuid": "b593714a-8556-4653-875a-58041501497d", "scanned_at": "2026-10-25T19:06:10Z", "final_url": "https://eobuwie-reliance.shop/", "status": 200, "history": [ { "url": "https://eobuwie-reliance.shop/", "status": 200 } ], "dom_hash": "8fe695537bd6733d13e40da017be11a0b046f65e5b78bef01c8bbc6998330f29", "doc_hash": "248ada8940fea64a3389ccc87607e02405df5ab8edbe8abe26d21c33bb381ec7", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "eobuwie-reliance.shop", "type": "A", "value": "172.67.131.45" }, { "name": "eobuwie-reliance.shop", "type": "A", "value": "104.21.3.205" }, { "name": "eobuwie-reliance.shop", "type": "AAAA", "value": "2606:4700:3033::ac43:832d" }, { "name": "eobuwie-reliance.shop", "type": "AAAA", "value": "2606:4700:3030::6815:3cd" } ], "dnssec_valid": false, "ip": "172.67.131.45", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T19:05:29Z", "analysis_at": "2026-10-25T07:31:50Z", "stats": { "timeout": 0, "harmless": 51, "malicious": 3, "suspicious": 5, "undetected": 33 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "Fortinet": "spam", "Kaspersky": "phishing", "LevelBlue": "suspicious", "Gridinsoft": "suspicious", "alphaMountain.ai": "suspicious", "Bfore.Ai PreCrime": "malicious" }, "reputation": 0, "first_seen": "2026-09-11T14:33:10Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "walt.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "tess.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "tess.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.131.45" }, { "ttl": 300, "type": "A", "value": "104.21.3.205" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::ac43:832d" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3030::6815:3cd" } ], "dns_at": "2026-10-25T07:37:40Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "eobuwie-reliance.shop" ], "issuer": "Google Trust Services / WE1", "serial": "31ecf638d2e239e713e502cc96186eed", "sha256": "6590171cd9a2438c72c92b3c7b332ac51ea5b0b5f2d5989364d80869991211cd", "subject": "eobuwie-reliance.shop", "valid_to": "2026-12-10T14:12:36Z", "valid_from": "2026-09-11T13:12:40Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T19:08:14Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "eobuwie-reliance.shop" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T19:05:12Z", "first": "2026-09-11T22:21:58Z", "changes": 1, "days_archived": 3, "scans_per_day": 0.05, "avg_page_bytes": 28506 }, "social_tags": { "title": "Error - eobuwie-PL" }, "trackers": { "requests": 21, "trackers": [ { "name": "Facebook", "company": "Meta", "country": "US", "category": "Advertising", "requests": 6 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "Facebook Connect", "company": "Meta", "country": "US", "category": "Site Analytics", "requests": 6 }, { "name": "TikTok Analytics", "company": "ByteDance Inc", "country": "KY", "category": "Site Analytics", "requests": 7 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 23, "wait": 219, "connect": 12, "download": 57 }, "response_ms": 313 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 429603, "co2_grams": 0.0157, "cleaner_than": 1 }, "dns_server": { "ns": [ { "ip": "172.64.33.148", "host": "walt.ns.cloudflare.com" }, { "ip": "108.162.192.227", "host": "tess.ns.cloudflare.com" } ], "zone": "eobuwie-reliance.shop" }, "cookies": { "cookies": [ { "name": "_bzhabf_vid" }, { "name": "_bzhabf_cvid" }, { "name": "_bzhabf_vs" }, { "name": "currency_code", "session": true }, { "name": "PHPSESSID", "session": true }, { "name": "__cf_bm", "secure": true, "http_only": true, "same_site": "None" }, { "name": "_BBCCFIH_ua", "secure": true, "same_site": "None" }, { "name": "_BBCCFIH_pu", "secure": true, "same_site": "None" }, { "name": "_BBCCFIH_tz", "secure": true, "same_site": "None" }, { "name": "_BBCCFIH_ss", "secure": true, "same_site": "None" }, { "name": "_BBCCFIH_lang", "secure": true, "same_site": "None" }, { "name": "_BBCCFIH_vs", "secure": true, "same_site": "None" }, { "name": "_BBCCFIH_dt", "secure": true, "same_site": "None" }, { "name": "_ttp", "secure": true, "same_site": "None" }, { "name": "_tt_enable_cookie" }, { "name": "_ttp" }, { "name": "ttcsid" }, { "name": "ttcsid_D47NSCRC77U0CLRNNU20" } ] }, "location": { "ip": "2606:4700:3030::6815:3cd", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "eobuwie-reliance.shop" }, "dns": { "A": [ "172.67.131.45", "104.21.3.205" ], "NS": [ "tess.ns.cloudflare.com", "walt.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"tess.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415716714, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3033::ac43:832d", "2606:4700:3030::6815:3cd" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3030::6815:3cd", "family": 6 }, "redirects": { "chain": [ "https://eobuwie-reliance.shop" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } } } } ```