# PhishDestroy domain threat record: eobuwieonlinesalepl.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/eobuwieonlinesalepl.com/
Machine-readable companion: https://phishdestroy.io/domain/eobuwieonlinesalepl.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-25 19:04:33 UTC
- Stored record updated: 2026-10-25 21:21:28 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 47.88.35.11
- Registrar in stored WHOIS data: Dominet (HK) Limited
- Registration date in stored WHOIS data: 2025-11-28 09:39:32 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a168d6-591b-77e1-b6f0-3e20ea3e540a/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/eobuwieonlinesalepl.com
- Certificate Transparency search: https://crt.sh/?q=%25.eobuwieonlinesalepl.com
- Web Archive lookup: https://web.archive.org/web/*/https://eobuwieonlinesalepl.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added eobuwieonlinesalepl.com to its blocklist on 2026-10-25. A request to the domain returned HTTP 200 and a content‑type of image/png, but no page title was captured. The listing is based on multiple security‑vendor detections rather than observed malicious behavior on the page.

How the scam works
Detections associate the domain with phishing or malware, but the captured page showed only an image/png response without a title. Without concrete evidence, the specific scam technique cannot be confirmed.

Evidence
VirusTotal scanned the domain on 2026-10-25 and returned 16 detections from 92 engines, labeling it as phishing, malicious, spam or suspicious. Google Safe Browsing did not flag it, urlscan.io’s ML engine scored it 97 / 100 as malicious while the overall verdict was clean, and OTX listed one pulse.

Infrastructure
The domain was registered on 2025-11-28 through Dominet (HK) Limited, expiring on 2026-11-28. It was observed to resolve to IP 47.88.35.11, linked to ASN 45102 operated by Alibaba (US) Technology Co., Ltd., with the IP recorded in the United States. The site used a Let’s Encrypt certificate (issued 2026-05-13, valid until 2026-08-11), and the nameservers were ns1.http-dns.com and ns2.http-dns.com; Cloudflare Radar flagged it for malware risk.

What to do
Do not submit credentials or download files from this site; if you have entered sensitive data, change passwords and monitor accounts. Defenders should block eobuwieonlinesalepl.com and review proxy or firewall logs for recent accesses.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a168d6-591b-77e1-b6f0-3e20ea3e540a/
Cloudflare Radar report: https://radar.cloudflare.com/scan/2e3499c1-d1e2-4a75-8360-d02c3bff8277
Stored capture screenshot: https://urlscan.io/screenshots/01a168d6-591b-77e1-b6f0-3e20ea3e540a.png
Cloudflare Radar screenshot (2026-10-25T19:05:52Z): https://screenshots.phishdestroy.io/cf/2e3499c1-d1e2-4a75-8360-d02c3bff8277.png
VirusTotal report: https://www.virustotal.com/gui/domain/eobuwieonlinesalepl.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=eobuwieonlinesalepl.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 19:08:03 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a168d6-591b-77e1-b6f0-3e20ea3e540a.png
  Captured: 2026-10-25 19:04:33 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a168d6-591b-77e1-b6f0-3e20ea3e540a.png
  Source report: https://urlscan.io/result/01a168d6-591b-77e1-b6f0-3e20ea3e540a/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/2e3499c1-d1e2-4a75-8360-d02c3bff8277.png
  Captured: 2026-10-25 19:05:52 UTC
  Source report: https://radar.cloudflare.com/scan/2e3499c1-d1e2-4a75-8360-d02c3bff8277
  SHA-256: a5db7ab655d3900bfb2bf44f8483ca7ce06fc6f795376f14b777be50f1f0af62

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T19:07:18Z",
        "uuid": "01a168d6-591b-77e1-b6f0-3e20ea3e540a",
        "scanned_at": "2026-10-23T12:57:26Z",
        "final_url": "https://eobuwieonlinesalepl.com/",
        "status": 200,
        "ip": "47.88.35.11",
        "ips": [
            "47.88.35.11"
        ],
        "asns": [
            "45102"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "04d05978fdb111358073ab0524e5c1fafc0826615c206987618416b8bd8a4747",
        "globals": [
            "_Z_ET"
        ],
        "cookies": [
            "PHPSESSID"
        ],
        "domain_age_days": 329,
        "apex_age_days": 329,
        "tls_age_days": 163,
        "tls_valid_days": 89,
        "requests": 6,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "image/png"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T19:07:19Z",
        "uuid": "2e3499c1-d1e2-4a75-8360-d02c3bff8277",
        "scanned_at": "2026-10-25T19:05:52Z",
        "final_url": "https://eobuwieonlinesalepl.com/",
        "history": [
            {
                "url": "https://eobuwieonlinesalepl.com/",
                "status": 0
            }
        ],
        "dom_hash": "94bfc7c24186e5b245b5675859fb84b248547086370961e5637590177432b219",
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "eobuwieonlinesalepl.com",
                "type": "A",
                "value": "47.88.35.11"
            }
        ],
        "dnssec_valid": false,
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dominet (HK) Limited",
            "created": "2025-11-28T10:39:32Z",
            "updated": "2025-11-28T10:39:32Z",
            "expires": "2026-11-28T10:39:32Z",
            "nameservers": [
                "ns1.http-dns.com",
                "ns2.http-dns.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T19:05:28Z",
        "analysis_at": "2026-10-25T12:26:22Z",
        "stats": {
            "timeout": 0,
            "harmless": 45,
            "malicious": 11,
            "suspicious": 5,
            "undetected": 31
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "spam",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "spam",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "Dominet (HK) Limited",
        "created": "2025-11-28T10:39:32Z",
        "expires": "2026-11-28T10:39:32Z",
        "updated": "2025-11-28T10:39:32Z",
        "first_seen": "2025-11-28T10:58:29Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns1.ec-dns.com"
            },
            {
                "ttl": 600,
                "type": "A",
                "value": "47.88.35.11"
            },
            {
                "ttl": 600,
                "type": "SOA",
                "rname": "admin.ec-dns.com",
                "value": "ns1.ec-dns.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns2.ec-dns.com"
            }
        ],
        "dns_at": "2026-10-25T12:31:50Z",
        "jarm": "15d3fd16d29d29d00042d43d00000041ad16ead50175e1e575f5579aa6b5c8",
        "cert": {
            "san": [
                "eobuwieonlinesalepl.com"
            ],
            "issuer": "Let's Encrypt / R13",
            "serial": "60b71de7ea583c46fee526efcc8c4cce6a8",
            "sha256": "70a3d30d5c1b70307e7d463f6913c77bd03ae89275b6e3fe46e461acad21ec6a",
            "subject": "eobuwieonlinesalepl.com",
            "valid_to": "2026-08-11T09:56:36Z",
            "valid_from": "2026-05-13T09:56:37Z"
        },
        "whois": {
            "registrar": "Dominet (HK) Limited",
            "registrar_iana_id": "3775",
            "registrar_url": "http://www.alibabacloud.com",
            "created": "2025-11-28T10:39:32Z",
            "updated": "2025-11-28T10:39:32Z",
            "expires": "2026-11-28T10:39:32Z",
            "status": [
                "ok"
            ],
            "nameservers": [
                "ns1.http-dns.com",
                "ns2.http-dns.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "active"
            ],
            "events": {
                "expiration": "2026-11-28T10:39:32Z",
                "registration": "2025-11-28T10:39:32Z",
                "registrar expiration": "2026-11-28T10:39:32Z",
                "last update of RDAP database": "2025-11-28T10:39:33Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T19:07:40Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "eobuwieonlinesalepl.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "trackers": {
            "requests": 2
        },
        "tls_connection": {
            "alpn": "http/1.1",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": false,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "183.253.57.192",
                    "host": "ns1.ec-dns.com"
                },
                {
                    "ip": "1.193.216.193",
                    "host": "ns2.ec-dns.com"
                }
            ],
            "zone": "eobuwieonlinesalepl.com"
        },
        "location": {
            "ip": "47.88.35.11",
            "asn": "45102",
            "org": "Alibaba (US) Technology Co., Ltd.",
            "city": "Minkler",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / R13",
            "subject": "eobuwieonlinesalepl.com"
        },
        "dns": {
            "A": [
                "47.88.35.11"
            ],
            "NS": [
                "ns1.ec-dns.com",
                "ns2.ec-dns.com"
            ],
            "SOA": "{\"nsname\": \"ns1.ec-dns.com\", \"hostmaster\": \"admin.ec-dns.com\", \"serial\": 1764326406, \"refresh\": 3600, \"retry\": 300, \"expire\": 1209600, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "get_ip": {
            "ip": "47.88.35.11",
            "family": 4
        },
        "whois": {
            "registrar": "Dominet (HK) Limited",
            "created": "2025-11-28T10:39:32Z",
            "updated": "2025-11-28T10:39:32Z",
            "expires": "2026-11-28T10:39:32Z",
            "status": [
                "ok https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.http-dns.com",
                "ns2.http-dns.com"
            ]
        }
    }
}
```