eoydoi.shop
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of eoydoi.shop
The domain eoydoi.shop appears to host a landing page branded as an "Amazon Refund Check" service. Based on the visible page title, layout, and screenshot, the site claims to help users determine whether they are eligible for refunds related to recent Amazon orders, presenting estimated recovery amounts and a call-to-action to "Check My Eligibility." The page uses Amazon branding cues and refund-related messaging rather than operating as a general informational website.
Based on the available domain and hosting data, this does not appear to be an official Amazon-owned domain. The domain name itself is unrelated to Amazon, and it was registered very recently through a third-party registrar. The site is hosted on infrastructure in Moldova and uses a basic nginx web server with Cloudflare nameservers, which may indicate a lightweight promotional or lead-capture setup rather than an established corporate web property.
Safety Assessment for eoydoi.shop
This website shows multiple risk indicators at the time of this scan. Most notably, 17 out of 91 security engines flagged the domain, with many classifying it as phishing or otherwise malicious. The page also appears to imitate Amazon by using Amazon branding and presenting a refund-eligibility offer on a non-Amazon domain, which may be consistent with credential harvesting, lead generation abuse, or other deceptive activity. The domain is only 1 day old and has no established traffic ranking, both of which can increase uncertainty and risk.
The malware scan did not detect malicious files in the small set of scanned resources, and several major threat databases were clean at the time of review. However, the domain's IP address is listed on one mail-reputation blocklist, which is a minor cautionary signal. In this case, that weaker signal is outweighed by the stronger phishing-related detections and the apparent brand imitation visible on the page.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued by TrustAsia Technologies with an expiry date in late 2026, which indicates that HTTPS is configured. It is served by nginx from an IP address associated with hosting in Chisinau, Moldova, and the domain uses Cloudflare nameservers. DNSSEC appears to be unsigned at the time of this scan.
From a technical perspective, the page appears relatively simple, with a small number of scanned files and no flagged iframes or external links in the provided scan results. Even so, the combination of a newly registered domain, unsigned DNSSEC, and phishing-related detections across multiple security engines may warrant caution despite the presence of valid SSL/TLS.
Share your experience with this website. Was it safe? Did you encounter any issues?