eaglestore[.]biz

Analysis of the domain eaglestore.biz indicates elevated risk consistent with phishing infrastructure. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with low-reputation registrations. It resolves to the IP address 172.67.202.220, which is part of AS13335 (Cloudflare, Inc.), a network commonly leveraged by threat actors to obscure hosting origins and evade takedowns. Nameservers alfred.ns.cloudflare.com and daphne.ns.cloudflare.com further confirm Cloudflare as the DNS provider. The domain has been flagged by one security vendor on a single blocklist, as recorded by PhishDestroy.

While VirusTotal detection is minimal (1 of 95 vendors), this does not indicate safety; rather, it reflects limited visibility at the time of scanning. The SSL certificate is issued by Google Trust Services (WE1), a legitimate but frequently abused certificate authority in phishing campaigns. Trust scores from Scamadviser and Gridinsoft both register at 1/100 and 0/100, respectively, reinforcing the domain’s low reputation. The page title, 'EagleStore.su - Home,' suggests an attempt to mimic a retail or e-commerce platform, though the exact brand or target remains unconfirmed due to lack of deeper content analysis. Detected technologies include PHP, Cloudflare, and HTTP/3, which are consistent with modern phishing sites aiming for performance and evasion.

The domain is currently offline, likely following detection and enforcement action. Defenders should treat eaglestore.biz as compromised infrastructure. The use of Cloudflare, a low-trust registrar, and minimal detection coverage highlights the need for proactive monitoring of newly registered domains with similar characteristics. Network-level blocking of 172.67.202.220 and related Cloudflare IPs may prevent further exposure. No evidence of a specific phishing kit or targeted brand is available at this time.