# PhishDestroy domain threat record: esoiqstore.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/esoiqstore.shop/ Machine-readable companion: https://phishdestroy.io/domain/esoiqstore.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 22:49:16 UTC - Last availability or vendor check: 2026-10-26 00:21:03 UTC - Stored record updated: 2026-10-26 00:21:03 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: Orca ## Stored infrastructure - Observed IP address: 34.160.145.2 - Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND - Last stored HTTP status: 200 ## Evidence links - URLScan report: https://urlscan.io/result/01a17545-f104-7082-9bfe-792892bc230e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/esoiqstore.shop - Certificate Transparency search: https://crt.sh/?q=%25.esoiqstore.shop - Web Archive lookup: https://web.archive.org/web/*/https://esoiqstore.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s automated assessment labels esoiqstore.shop as an Impersonation phishing page. The recorded page title reads “Sklep internetowy z bielizną wyjątkową jak Ty”. The domain was first seen by PhishDestroy on 2026-10-25. An HTTP request on that date returned a 200 status code. How the scam works Impersonation phishing sites copy the look and language of legitimate brands to trick visitors into submitting login credentials, personal data, or payment information. Victims are typically lured by familiar branding and then directed to enter sensitive details, which attackers harvest for fraud or account takeover. Evidence VirusTotal’s analysis on 2026-10-26 reported 16 detections from 92 engines, including 13 malicious and 3 suspicious labels. Google Safe Browsing checked on 2026-10-26 did not flag the site. urlscan captured the site on 2026-10-25 and its overall verdict was malicious with a score of 100, categorised as phishing and tagged as a fake shop. OTX listed five pulses referencing the domain as of 2026-10-26. PhishDestroy’s internal blocklist marks the domain as blocked, while external blocklist checks on 2026-10-26 found no listings; Spamhaus DBL also reported no listing. Infrastructure The domain was registered 37 days before the first observation, with the apex and TLS certificate created on 2026-09-18. The recorded IP was 34.160.145.2, belonging to Google LLC in the United States. The TLS certificate, issued by Google Trust Services, is valid until 2026-12-17. Nameservers are ns1.ec-dns.com and ns2.ec-dns.com. What to do Do not enter any credentials or personal data on the site. If you have already submitted information, change associated passwords and monitor accounts for unauthorized activity. Report the URL to PhishDestroy and your organization’s security team. Defenders should block traffic to esoiqstore.shop at the firewall or proxy and review logs for any connections from the recorded IP address. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a17545-f104-7082-9bfe-792892bc230e/ Cloudflare Radar report: https://radar.cloudflare.com/scan/ff0ff3ee-1b82-4cb6-82ca-d0cb24a4fee9 Stored capture screenshot: https://i.ibb.co/r2cdnMdQ/d4db076fcb2c.png URLScan screenshot (2026-09-19T06:00:25Z): https://screenshots.phishdestroy.io/us/01a0b840-56fc-76da-ba5d-dfaf05d48667.png URLScan capture report: https://urlscan.io/result/01a0b840-56fc-76da-ba5d-dfaf05d48667/ URLScan screenshot (2026-09-19T09:36:49Z): https://screenshots.phishdestroy.io/us/01a0b906-72e6-7472-b820-c53c61d5c524.png URLScan capture report: https://urlscan.io/result/01a0b906-72e6-7472-b820-c53c61d5c524/ URLScan screenshot (2026-09-20T09:52:53Z): https://screenshots.phishdestroy.io/us/01a0be3b-8239-729b-8a79-f0b8754dd71b.png URLScan capture report: https://urlscan.io/result/01a0be3b-8239-729b-8a79-f0b8754dd71b/ URLScan screenshot (2026-10-25T22:49:52Z): https://screenshots.phishdestroy.io/us/01a17541-7564-723c-a39b-ed71737813cf.png URLScan capture report: https://urlscan.io/result/01a17541-7564-723c-a39b-ed71737813cf/ VirusTotal report: https://www.virustotal.com/gui/domain/esoiqstore.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=esoiqstore.shop Archived copy: https://web.archive.org/web/20261025224930/https://esoiqstore.shop/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 23:53:40 UTC ## Stored page captures - Primary capture: https://i.ibb.co/r2cdnMdQ/d4db076fcb2c.png Captured: 2026-10-25 22:55:45 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a17545-f104-7082-9bfe-792892bc230e.png Captured: 2026-10-25 22:55:45 UTC Source report: https://urlscan.io/result/01a17545-f104-7082-9bfe-792892bc230e/ - URLScan capture 2: https://screenshots.phishdestroy.io/01a0be3b-8239-729b-8a79-f0b8754dd71b.png Captured: 2026-10-25 22:49:16 UTC Source report: https://urlscan.io/result/01a17545-f104-7082-9bfe-792892bc230e/ - URLScan · 2026-09-19: https://screenshots.phishdestroy.io/us/01a0b840-56fc-76da-ba5d-dfaf05d48667.png Captured: 2026-09-19 06:00:25 UTC Source report: https://urlscan.io/result/01a0b840-56fc-76da-ba5d-dfaf05d48667/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - URLScan · 2026-09-19: https://screenshots.phishdestroy.io/us/01a0b906-72e6-7472-b820-c53c61d5c524.png Captured: 2026-09-19 09:36:49 UTC Source report: https://urlscan.io/result/01a0b906-72e6-7472-b820-c53c61d5c524/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - URLScan · 2026-09-20: https://screenshots.phishdestroy.io/us/01a0be3b-8239-729b-8a79-f0b8754dd71b.png Captured: 2026-09-20 09:52:53 UTC Source report: https://urlscan.io/result/01a0be3b-8239-729b-8a79-f0b8754dd71b/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17541-7564-723c-a39b-ed71737813cf.png Captured: 2026-10-25 22:49:52 UTC Source report: https://urlscan.io/result/01a17541-7564-723c-a39b-ed71737813cf/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T23:22:10Z", "uuid": "01a17545-f104-7082-9bfe-792892bc230e", "scanned_at": "2026-10-25T22:54:49Z", "final_url": "https://esoiqstore.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://esoiqstore.shop/", "from": "http://esoiqstore.shop/", "status": 307 } ], "ip": "34.160.145.2", "ptr": "2.145.160.34.bc.googleusercontent.com", "domains": [ "ssl.ssl-images-may.com", "connect.facebook.net", "fonts.gstatic.com", "www.gstatic.com", "translate-pa.googleapis.com", "translate.googleapis.com", "translate.google.com" ], "ips": [ "172.217.119.4", "142.251.14.95", "192.178.183.113", "142.251.14.94", "57.144.222.128", "34.111.216.228", "34.160.145.2" ], "asns": [ "15169", "32934", "396982" ], "countries": [ "US", "NL" ], "link_domains": [ "translate.google.com", "www.facebook.com", "pl.pinterest.com", "www.instagram.com", "www.youtube.com" ], "social": [ "https://www.facebook.com/esotiq", "https://www.instagram.com/esotiq", "https://www.youtube.com/user/ESOTIQLingerie" ], "doc_hash": "176ca6192ea403603d8aae867e406e1663423983d59d4e4d8e5c50ef860b1633", "script_hashes": [ "749fc96cb07b13141550e29be8f92aa34aac2d030310d8ffd53650c840f917a7", "a62af29258561126c7c2449bdd589c0957fa816724f6698eac471bf24b5f5034", "9cb40cc24dd24b49dbadc70d4864265d97012727e68f8455fa1bcfd5920920bf", "b3f765e90760aff4067c6e5af670e525e9f80c2509f9abaa6d86fd771f4cccb6", "48448608a34448bf8591444ef3995f65ed06c626ac1923b225cc806d5a5de3fa", "80aee297b48f36ae4e1dd311da2000f882cef2d1d56c75f58d84607cf73365a1", "e9573c7370f5edfd025e43df5f151f9599fb055b39c150420a59038eeaf08ded" ], "globals": [ "_esoiqstoreshop_", "_BBDBDBB_", "themeConfig", "shop_theme", "storeConfig", "shop_config", "lang", "shop_lang", "C_SETTINGS", "_GET_C_SETTING_", "oemcart_client_browser", "oemcart_current_template", "oemcart_store_id", "oemcart_user_id", "oemcart_time_zone", "oemcart_page_ca", "oemcart_user_email", "oemcart_pv_id", "oemcart_data_from", "oemcart_user", "oemcart_currency", "oemcart_currency_code", "oemcart_currency_rate", "oemcart_currency_lcoin", "oemcart_currency_rcoin", "oemcart_currency_decimal", "oemcart_base_currency", "oemcart_base_currency_code", "oemcart_base_currency_rate", "oemcart_base_currency_lcoin", "oemcart_base_currency_rcoin", "oemcart_base_currency_decimal", "oemcart_website_domain", "oemcart_real_domain", "oemcart_site_type", "oemcart_client_country", "oemcart_protocal_type", "oemcart_website_language", "oemcart_utm_source", "oemcart_utm_medium" ], "cookies": [ "_fbp", "_bcedhf_vid", "_bcedhf_cvid", "_bcedhf_vs", "utm_source", "utm_medium", "order_utm_history", "landing_page", "_bcedhf_ka", "first_http_referer", "first_visit_time", "PHPSESSID", "_BBDBDBB_ua", "_BBDBDBB_pu", "_BBDBDBB_tz", "_BBDBDBB_ss", "_BBDBDBB_lang", "_BBDBDBB_vs", "_BBDBDBB_dt" ], "storage_keys": [ "lastExternalReferrer", "lastExternalReferrerTime", "APP_GOOGLETRANSLATE_VISIT_COUNT" ], "tls": { "san": [ "esoiqstore.shop" ], "cipher": "AES_128_GCM", "issuer": "WR3", "subject": "esoiqstore.shop", "protocol": "TLS 1.3", "valid_to": "2026-12-17T16:52:52Z", "valid_from": "2026-09-18T15:58:18Z" }, "domain_age_days": 37, "apex_age_days": 37, "tls_age_days": 37, "tls_valid_days": 90, "requests": 50, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 100, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "nginx", "content-type": "text/html; charset=utf-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T23:22:13Z", "uuid": "ff0ff3ee-1b82-4cb6-82ca-d0cb24a4fee9", "scanned_at": "2026-10-25T22:49:57Z" }, "vt": { "v": 1, "fetched_at": "2026-10-25T23:52:05Z", "analysis_at": "2026-10-19T12:47:44Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 13, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "dga" ], "categories": { "Google": "shopping", "Sophos": "phishing and fraud", "PREBYTES": "fraud", "alphaMountain.ai": "Phishing (alphaMountain.ai)", "Forcepoint ThreatSeeker": "newly registered websites" }, "first_seen": "2026-09-18T17:34:08Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "ns1.ec-dns.com" }, { "ttl": 600, "type": "SOA", "rname": "admin.ec-dns.com", "value": "ns1.ec-dns.com" }, { "ttl": 600, "type": "A", "value": "34.160.145.2" }, { "ttl": 21600, "type": "NS", "value": "ns2.ec-dns.com" } ], "dns_at": "2026-10-19T12:53:01Z", "jarm": "29d3fd00029d29d00042d43d00041d6f940079659edb62e1c38c38bd26ee84", "cert": { "san": [ "esoiqstore.shop" ], "issuer": "Google Trust Services / WR3", "serial": "77e571d91e7408110a7dbd7f030db49e", "sha256": "bb39beacd66460e03127cd45d40e42ee34c3fda390fa9194746d9ced7b2ef95b", "subject": "esoiqstore.shop", "valid_to": "2026-12-17T16:52:52Z", "valid_from": "2026-09-18T15:58:18Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T22:51:08Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "esoiqstore.shop" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T22:49:30Z", "first": "2026-09-19T03:18:11Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.03, "avg_page_bytes": 63810 }, "social_tags": { "title": "500 Internal Server Error", "robots": "noindex, nofollow" }, "trackers": { "requests": 43, "trackers": [ { "name": "Facebook", "company": "Meta", "country": "US", "category": "Advertising", "requests": 7 }, { "name": "Facebook Custom Audience", "company": "Meta", "country": "US", "category": "Advertising", "requests": 3 }, { "name": "Google Translate", "company": "Google", "country": "US", "category": "Customer Interaction", "requests": 1 }, { "name": "Google APIs", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 5 }, { "name": "Facebook Connect", "company": "Meta", "country": "US", "category": "Site Analytics", "requests": 4 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 740, "tls": 18, "wait": 187, "connect": 7, "download": 1 }, "response_ms": 953 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 219, "co2_grams": 0, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "61.158.128.7", "host": "ns2.ec-dns.com" }, { "ip": "211.99.99.47", "host": "ns1.ec-dns.com" } ], "zone": "esoiqstore.shop" }, "cookies": { "cookies": [ { "name": "_fbp", "same_site": "Lax" }, { "name": "_bcedhf_vid" }, { "name": "_bcedhf_cvid" }, { "name": "_bcedhf_vs" }, { "name": "utm_source" }, { "name": "utm_medium" }, { "name": "order_utm_history" }, { "name": "landing_page" }, { "name": "_bcedhf_ka" }, { "name": "first_http_referer" }, { "name": "first_visit_time" }, { "name": "PHPSESSID", "session": true }, { "name": "_BBDBDBB_ua", "secure": true, "same_site": "None" }, { "name": "_BBDBDBB_pu", "secure": true, "same_site": "None" }, { "name": "_BBDBDBB_tz", "secure": true, "same_site": "None" }, { "name": "_BBDBDBB_ss", "secure": true, "same_site": "None" }, { "name": "_BBDBDBB_lang", "secure": true, "same_site": "None" }, { "name": "_BBDBDBB_vs", "secure": true, "same_site": "None" }, { "name": "_BBDBDBB_dt", "secure": true, "same_site": "None" } ] }, "location": { "ip": "34.160.145.2", "asn": "396982", "org": "Google LLC", "city": "Kansas City", "country": "US" }, "ssl": { "issuer": "Google Trust Services / WR3", "subject": "esoiqstore.shop" }, "dns": { "A": [ "34.160.145.2" ], "NS": [ "ns2.ec-dns.com", "ns1.ec-dns.com" ], "SOA": "{\"nsname\": \"ns1.ec-dns.com\", \"hostmaster\": \"admin.ec-dns.com\", \"serial\": 1789748403, \"refresh\": 3600, \"retry\": 300, \"expire\": 1209600, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "34.160.145.2", "family": 4 }, "redirects": { "chain": [ "https://esoiqstore.shop" ] }, "subdomains": { "count": 1, "subdomains": [ "www.esoiqstore.shop" ] }, "headers": { "headers": { "server": "nginx", "content-type": "text/html; charset=utf-8" } } } } ```