# PhishDestroy domain threat record: esoiqstore.top

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/esoiqstore.top/
Machine-readable companion: https://phishdestroy.io/domain/esoiqstore.top/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 22:49:16 UTC
- Last availability or vendor check: 2026-10-25 23:00:29 UTC
- Stored record updated: 2026-10-25 23:30:40 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: flagged

## Stored infrastructure

- Observed IP address: 34.160.74.17
- Registrar in stored WHOIS data: West263 International Limited
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-09-18 08:19:44 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a0b906-7751-7349-bf02-623213fbc802/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/esoiqstore.top
- Certificate Transparency search: https://crt.sh/?q=%25.esoiqstore.top
- Web Archive lookup: https://web.archive.org/web/*/https://esoiqstore.top/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy classified esoiqstore.top as suspicious because Google Safe Browsing identified it as a social‑engineering threat and multiple security engines reported malicious activity. The domain was first seen by PhishDestroy on 2026-10-25, 37 days after its registration on 2026-09-18. A page fetch on that date returned HTTP 200 but no page title was recorded.

How the scam works
The listing reflects a generic social‑engineering risk where an attacker may present a convincing web page to trick users into revealing credentials, personal data, or other sensitive information. No specific malicious behavior was observed on the captured page, so the assessment remains at the category level.

Evidence
Google Safe Browsing flagged the domain for social engineering on 2026-10-25. VirusTotal analysis on 2026-10-19 recorded 17 malicious and 2 suspicious detections out of 92 engines, with vendors such as BitDefender, ESET, Fortinet and Google Safe Browsing labeling it phishing. URLScan captured the site on 2026-09-19; its machine‑learning engine gave a malicious score of 96, though the overall verdict was not malicious. Cloudflare Radar reported a malware category for the domain on 2026-10-25. OTX listed one pulse referencing the domain on 2026-10-25, and PhishDestroy’s internal blocklist marks it as blocked while external blocklists showed no hits.

Infrastructure
The domain was registered on 2026-09-18 through West263 International Limited. DNS records show an A record to 34.160.74.17 and NS records at ns1.ec-dns.com and ns2.ec-dns.com. The IP belongs to Google LLC in the United States. A TLS certificate issued by Google Trust Services is valid from 2026-09-18 to 2026-12-17 and covers only esoiqstore.top.

What to do
Avoid entering any credentials, personal information, or financial details on the site; if you have already done so, change affected passwords and monitor accounts for unauthorized activity. Network defenders should block the domain esoiqstore.top and review logs for any connections to it. Continue to monitor threat‑intelligence feeds for updates on this domain.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0b906-7751-7349-bf02-623213fbc802/
Cloudflare Radar report: https://radar.cloudflare.com/scan/6bf75b00-fab3-4edb-b5fd-a6a324cf3cec
Stored capture screenshot: https://urlscan.io/screenshots/01a0b906-7751-7349-bf02-623213fbc802.png
Cloudflare Radar screenshot (2026-10-25T22:49:58Z): https://screenshots.phishdestroy.io/cf/6bf75b00-fab3-4edb-b5fd-a6a324cf3cec.png
URLScan screenshot (2026-09-18T15:45:41Z): https://screenshots.phishdestroy.io/us/01a0b531-b62b-740d-bad6-f235862084cc.png
URLScan capture report: https://urlscan.io/result/01a0b531-b62b-740d-bad6-f235862084cc/
URLScan screenshot (2026-10-25T22:49:51Z): https://screenshots.phishdestroy.io/us/01a17541-5ef9-703c-ade4-0901a28e7e11.png
URLScan capture report: https://urlscan.io/result/01a17541-5ef9-703c-ade4-0901a28e7e11/
VirusTotal report: https://www.virustotal.com/gui/domain/esoiqstore.top
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=esoiqstore.top
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 22:51:18 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a0b906-7751-7349-bf02-623213fbc802.png
  Captured: 2026-10-25 22:49:16 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a0b906-7751-7349-bf02-623213fbc802.png
  Source report: https://urlscan.io/result/01a0b906-7751-7349-bf02-623213fbc802/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/6bf75b00-fab3-4edb-b5fd-a6a324cf3cec.png
  Captured: 2026-10-25 22:49:58 UTC
  Source report: https://radar.cloudflare.com/scan/6bf75b00-fab3-4edb-b5fd-a6a324cf3cec
  SHA-256: a5db7ab655d3900bfb2bf44f8483ca7ce06fc6f795376f14b777be50f1f0af62
- URLScan · 2026-09-18: https://screenshots.phishdestroy.io/us/01a0b531-b62b-740d-bad6-f235862084cc.png
  Captured: 2026-09-18 15:45:41 UTC
  Source report: https://urlscan.io/result/01a0b531-b62b-740d-bad6-f235862084cc/
  SHA-256: bd697ae6c1410199d85b7fd6b5e7e3d38264a29aaf6f572f5794afe182e97009
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17541-5ef9-703c-ade4-0901a28e7e11.png
  Captured: 2026-10-25 22:49:51 UTC
  Source report: https://urlscan.io/result/01a17541-5ef9-703c-ade4-0901a28e7e11/
  SHA-256: 5a9d7a61054c24cc6e2a7b6f6d929bb7c9fcf9e217527ba70bc85bf698c9093b

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T22:50:38Z",
        "uuid": "01a0b906-7751-7349-bf02-623213fbc802",
        "scanned_at": "2026-09-19T09:36:52Z",
        "final_url": "http://esoiqstore.top/",
        "status": 200,
        "redirects": [
            {
                "to": "https://esoiqstore.top/",
                "from": "http://esoiqstore.top/",
                "status": 307
            },
            {
                "to": "http://esoiqstore.top/",
                "from": "https://esoiqstore.top/",
                "status": 307
            }
        ],
        "ip": "34.160.74.17",
        "ptr": "17.74.160.34.bc.googleusercontent.com",
        "ips": [
            "34.160.74.17"
        ],
        "asns": [
            "396982"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "b2e31e669f420e9e7f4879f08db7ef66f7db9dc647f65dbadd6d94d7b063ee4d",
        "globals": [
            "_Z_ET"
        ],
        "cookies": [
            "PHPSESSID"
        ],
        "domain_age_days": 0,
        "apex_age_days": 0,
        "requests": 3,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 96,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "nginx",
            "content-type": "text/html; charset=utf-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T22:50:39Z",
        "uuid": "6bf75b00-fab3-4edb-b5fd-a6a324cf3cec",
        "scanned_at": "2026-10-25T22:49:58Z",
        "final_url": "https://esoiqstore.top/",
        "history": [
            {
                "url": "https://esoiqstore.top/",
                "status": 0
            }
        ],
        "dom_hash": "0be15d34945b061b4688e4c7a258d982bf21eeec94f047738c21f26a19145958",
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "esoiqstore.top",
                "type": "A",
                "value": "34.160.74.17"
            }
        ],
        "dnssec_valid": false,
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "West263 International Limited",
            "created": "2026-09-18T10:19:44Z",
            "expires": "2027-09-18T10:19:44Z",
            "nameservers": [
                "ns1.ec-dns.com.",
                "ns2.ec-dns.com."
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T22:49:50Z",
        "analysis_at": "2026-10-18T23:47:07Z",
        "stats": {
            "timeout": 0,
            "harmless": 41,
            "malicious": 15,
            "suspicious": 2,
            "undetected": 34
        },
        "detections": {
            "CRDF": "malicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "Fortinet": "phishing",
            "PREBYTES": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "LevelBlue": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Google Safe Browsing": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "categories": {
            "alphaMountain.ai": "Phishing, Newly Registered (alphaMountain.ai)"
        },
        "registrar": "West263 International Limited",
        "created": "2026-09-18T10:19:44Z",
        "expires": "2027-09-18T10:19:44Z",
        "updated": "2026-09-18T10:19:44Z",
        "first_seen": "2026-09-18T11:38:11Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns2.ec-dns.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns1.ec-dns.com"
            },
            {
                "ttl": 600,
                "type": "A",
                "value": "34.160.74.17"
            },
            {
                "ttl": 600,
                "type": "SOA",
                "rname": "admin.ec-dns.com",
                "value": "ns1.ec-dns.com"
            }
        ],
        "dns_at": "2026-10-18T23:52:26Z",
        "jarm": "29d3fd00029d29d00042d43d00041d6f940079659edb62e1c38c38bd26ee84",
        "cert": {
            "san": [
                "esoiqstore.top"
            ],
            "issuer": "Google Trust Services / WR3",
            "serial": "d1e418a92a02db38129fe561285965a9",
            "sha256": "8826de5a79beefd491f3eec382125f324d7672114e06213f745e649fc185dd3f",
            "subject": "esoiqstore.top",
            "valid_to": "2026-12-17T10:57:45Z",
            "valid_from": "2026-09-18T10:03:52Z"
        },
        "whois": {
            "registrar": "West263 International Limited",
            "registrar_iana_id": "1915",
            "registrar_url": "http://www.hkdns.hk",
            "created": "2026-09-18T10:19:44Z",
            "updated": "2026-09-18T10:19:44Z",
            "expires": "2027-09-18T10:19:44Z",
            "status": [
                "ok"
            ],
            "nameservers": [
                "ns1.ec-dns.com",
                "ns2.ec-dns.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "active"
            ],
            "events": {
                "expiration": "2027-09-18T18:19:44Z",
                "last changed": "2026-09-18T18:19:44Z",
                "registration": "2026-09-18T18:19:44Z",
                "last update of RDAP database": "2026-10-19T07:52:26Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T22:50:59Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "esoiqstore.top"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-09-18T17:48:04Z",
            "first": "2026-09-18T17:48:04Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 870
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "211.99.99.47",
                    "host": "ns1.ec-dns.com"
                },
                {
                    "ip": "1.193.216.193",
                    "host": "ns2.ec-dns.com"
                }
            ],
            "zone": "esoiqstore.top"
        },
        "location": {
            "ip": "34.160.74.17",
            "asn": "396982",
            "org": "Google LLC",
            "city": "Kansas City",
            "country": "US"
        },
        "dns": {
            "A": [
                "34.160.74.17"
            ],
            "NS": [
                "ns1.ec-dns.com",
                "ns2.ec-dns.com"
            ],
            "SOA": "{\"nsname\": \"ns1.ec-dns.com\", \"hostmaster\": \"admin.ec-dns.com\", \"serial\": 1789726878, \"refresh\": 3600, \"retry\": 300, \"expire\": 1209600, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "get_ip": {
            "ip": "34.160.74.17",
            "family": 4
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.esoiqstore.top"
            ]
        },
        "whois": {
            "registrar": "West263 International Limited",
            "created": "2026-09-18T10:19:44Z",
            "updated": "2026-09-18T10:19:44Z",
            "expires": "2027-09-18T10:19:44Z",
            "status": [
                "ok https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.ec-dns.com",
                "ns2.ec-dns.com"
            ]
        }
    }
}
```