# PhishDestroy domain threat record: ezeb.saldi-scholl.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/ezeb.saldi-scholl.shop/ Machine-readable companion: https://phishdestroy.io/domain/ezeb.saldi-scholl.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-26 00:28:41 UTC - Stored record updated: 2026-10-26 09:10:43 UTC - VirusTotal detections in the stored snapshot: 18/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 104.16.145.247 - Registrar in stored WHOIS data: Dynadot Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-07-14 01:48:22 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a0d812-c067-70db-9894-1e70fac17ff2/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/ezeb.saldi-scholl.shop - Certificate Transparency search: https://crt.sh/?q=%25.ezeb.saldi-scholl.shop - Web Archive lookup: https://web.archive.org/web/*/https://ezeb.saldi-scholl.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed ezeb.saldi-scholl.shop as a suspicious domain based on multiple security‑vendor detections. The recorded page title is “500 Internal Server Error”. The domain was first seen by PhishDestroy on 2026-10-26. How the scam works The available evidence does not show a specific malicious behavior on this page; instead, the domain is flagged by many security engines that commonly label phishing, malware distribution, or credential‑harvesting sites. Without observed malicious content, the listing reflects a risk category rather than a confirmed scheme. Evidence VirusTotal scanned the domain on 2026-10-24 and recorded 14 malicious and 4 suspicious detections out of 92 engines, with vendors such as BitDefender, Fortinet and Kaspersky marking it as phishing or malicious. Google Safe Browsing checked the domain on 2026-10-26 and did not flag it. URLScan captured the site on 2026-09-25; its engine score was 95 (malicious) but the overall verdict was clean. Cloudflare Radar scanned the domain on 2026-10-26 and returned a malicious verdict, labeling it as phishing and malware. OTX reported zero pulses, and external blocklists showed no entries, while PhishDestroy’s internal blocklist contains the domain. Infrastructure The recorded IP for the domain was 104.16.145.247, associated with Cloudflare, Inc. in Canada. TLS is provided by Google Trust Services, valid from 2026-09-18 to 2026-12-17. The domain was registered 65 days ago, the apex 73 days ago, and uses Cloudflare nameservers without DNSSEC. What to do Do not submit credentials or personal data to this site; if you have, change the associated passwords immediately. Network defenders should block the domain and monitor for connections to 104.16.145.247. Continue to watch security feeds for any new activity related to this domain. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a0d812-c067-70db-9894-1e70fac17ff2/ Cloudflare Radar report: https://radar.cloudflare.com/scan/71cd0cd6-982f-465a-873d-a69fb2ec1ca1 Stored capture screenshot: https://urlscan.io/screenshots/01a0d812-c067-70db-9894-1e70fac17ff2.png Cloudflare Radar screenshot (2026-10-26T00:33:23Z): https://screenshots.phishdestroy.io/cf/71cd0cd6-982f-465a-873d-a69fb2ec1ca1.png URLScan screenshot (2026-09-24T01:31:04Z): https://screenshots.phishdestroy.io/us/01a0d109-81fc-7254-8242-7f5999fb2eec.png URLScan capture report: https://urlscan.io/result/01a0d109-81fc-7254-8242-7f5999fb2eec/ URLScan screenshot (2026-09-24T10:10:17Z): https://screenshots.phishdestroy.io/us/01a0d2e4-d6d8-75ac-82de-bb63bc2b6e7a.png URLScan capture report: https://urlscan.io/result/01a0d2e4-d6d8-75ac-82de-bb63bc2b6e7a/ VirusTotal report: https://www.virustotal.com/gui/domain/ezeb.saldi-scholl.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=ezeb.saldi-scholl.shop Archived copy: https://web.archive.org/web/20261026002933/https://ezeb.saldi-scholl.shop/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-26 00:37:14 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a0d812-c067-70db-9894-1e70fac17ff2.png Captured: 2026-10-26 00:28:41 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a0d812-c067-70db-9894-1e70fac17ff2.png Captured: 2026-10-26 04:30:36 UTC Source report: https://urlscan.io/result/01a0d812-c067-70db-9894-1e70fac17ff2/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/71cd0cd6-982f-465a-873d-a69fb2ec1ca1.png Captured: 2026-10-26 00:33:23 UTC Source report: https://radar.cloudflare.com/scan/71cd0cd6-982f-465a-873d-a69fb2ec1ca1 SHA-256: 29ad9de84e78bf22cda1c08520d29e534874630d37cfa1dab6242c2cabfa094e - URLScan · 2026-09-24: https://screenshots.phishdestroy.io/us/01a0d109-81fc-7254-8242-7f5999fb2eec.png Captured: 2026-09-24 01:31:04 UTC Source report: https://urlscan.io/result/01a0d109-81fc-7254-8242-7f5999fb2eec/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - URLScan · 2026-09-24: https://screenshots.phishdestroy.io/us/01a0d2e4-d6d8-75ac-82de-bb63bc2b6e7a.png Captured: 2026-09-24 10:10:17 UTC Source report: https://urlscan.io/result/01a0d2e4-d6d8-75ac-82de-bb63bc2b6e7a/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-26T00:36:40Z", "uuid": "01a0d812-c067-70db-9894-1e70fac17ff2", "scanned_at": "2026-09-25T10:18:29Z", "final_url": "https://ezeb.saldi-scholl.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://ezeb.saldi-scholl.shop/", "from": "http://ezeb.saldi-scholl.shop/", "status": 307 } ], "ip": "104.16.145.247", "domains": [ "fonts.gstatic.com" ], "ips": [ "142.251.20.94", "104.16.145.247" ], "asns": [ "15169", "13335" ], "countries": [ "US" ], "doc_hash": "98e795e40ea61f9bd78d7045d95bc2db066951fa3dd8129c7804641ee0cec64b", "script_hashes": [ "7b265800f619c9daae7372876a8e115b6eb083fb16bd843ce14753035fce951b" ], "globals": [ "requestResize", "_ezebsaldischollshop_", "_DGCFF_", "themeConfig", "shop_theme", "storeConfig", "shop_config", "lang", "shop_lang", "C_SETTINGS", "_GET_C_SETTING_", "oemcart_client_browser", "oemcart_current_template", "oemcart_store_id", "oemcart_user_id", "oemcart_time_zone", "oemcart_page_ca", "oemcart_user_email", "oemcart_pv_id", "oemcart_data_from", "oemcart_user", "oemcart_currency", "oemcart_currency_code", "oemcart_currency_rate", "oemcart_currency_lcoin", "oemcart_currency_rcoin", "oemcart_currency_decimal", "oemcart_base_currency", "oemcart_base_currency_code", "oemcart_base_currency_rate", "oemcart_base_currency_lcoin", "oemcart_base_currency_rcoin", "oemcart_base_currency_decimal", "oemcart_website_domain", "oemcart_real_domain", "oemcart_site_type", "oemcart_client_country", "oemcart_protocal_type", "oemcart_website_language", "oemcart_utm_source" ], "cookies": [ "_ahzdgi_vid", "_ahzdgi_cvid", "_ahzdgi_vs", "utm_source", "utm_medium", "order_utm_history", "landing_page", "_ahzdgi_ka", "first_http_referer", "first_visit_time", "PHPSESSID", "__cf_bm" ], "tls": { "san": [ "ezeb.saldi-scholl.shop" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "ezeb.saldi-scholl.shop", "protocol": "TLS 1.3", "valid_to": "2026-12-17T21:48:22Z", "valid_from": "2026-09-18T20:48:25Z" }, "domain_age_days": 65, "apex_age_days": 73, "tls_age_days": 6, "tls_valid_days": 90, "requests": 6, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 95, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-26T00:36:41Z", "uuid": "71cd0cd6-982f-465a-873d-a69fb2ec1ca1", "scanned_at": "2026-10-26T00:33:23Z", "final_url": "https://ezeb.saldi-scholl.shop/", "status": 200, "history": [ { "url": "https://ezeb.saldi-scholl.shop/", "status": 200 } ], "dom_hash": "c2bef41e4b79f40ddbd1dd3c126b116b4d6fc79f58e379fa050a74328b92ab18", "doc_hash": "56d14a2f1c1aa8f1a3355ec6c1e1528ed31c476b690b94ac849263fc00552697", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "ezeb.saldi-scholl.shop", "type": "A", "value": "104.16.145.247" } ], "dnssec_valid": false, "ip": "104.16.145.247", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-26T00:32:00Z", "analysis_at": "2026-10-24T07:11:31Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 14, "suspicious": 4, "undetected": 31 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "Netcraft": "malicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "LevelBlue": "suspicious", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "first_seen": "2026-07-21T15:09:41Z", "dns": [ { "ttl": 300, "type": "A", "value": "104.16.145.247" } ], "dns_at": "2026-10-24T07:16:55Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "ezeb.saldi-scholl.shop" ], "issuer": "Google Trust Services / WE1", "serial": "aa8085a8550abc570eeab26e9c2c91ea", "sha256": "290c0808ea7d499192e98af7c265a0e89894a55c136bdf3633729f61d71bd341", "subject": "ezeb.saldi-scholl.shop", "valid_to": "2026-12-17T21:48:22Z", "valid_from": "2026-09-18T20:48:25Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-26T00:36:51Z", "caa_records": { "domain": "ezeb.saldi-scholl.shop" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-26T00:29:33Z", "first": "2026-10-07T19:19:00Z", "changes": 2, "days_archived": 3, "scans_per_day": 0.11, "avg_page_bytes": 25709 }, "social_tags": { "title": "500 Internal Server Error", "robots": "noindex, nofollow" }, "trackers": { "requests": 5, "trackers": [ { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 27, "wait": 345, "connect": 11, "download": 0 }, "response_ms": 385 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 219, "co2_grams": 0, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "108.162.194.125", "host": "kristina.ns.cloudflare.com" }, { "ip": "172.64.33.70", "host": "austin.ns.cloudflare.com" } ], "zone": "saldi-scholl.shop" }, "cookies": { "cookies": [ { "name": "_ahzdgi_vid" }, { "name": "_ahzdgi_cvid" }, { "name": "_ahzdgi_vs" }, { "name": "utm_source" }, { "name": "utm_medium" }, { "name": "order_utm_history" }, { "name": "landing_page" }, { "name": "_ahzdgi_ka" }, { "name": "first_http_referer" }, { "name": "first_visit_time" }, { "name": "PHPSESSID", "session": true }, { "name": "__cf_bm", "secure": true, "http_only": true, "same_site": "None" } ] }, "location": { "ip": "104.16.145.247", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "ezeb.saldi-scholl.shop" }, "dns": { "A": [ "104.16.145.247" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "104.16.145.247", "family": 4 }, "redirects": { "chain": [ "https://ezeb.saldi-scholl.shop" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } } } } ```