mass.report
Scan Intelligence Report0/100
low Risk
www.teniskortu34.shop
https://www.teniskortu34.shop
IP
172.67.154.242 · Cloudflare, Inc.
Location
Toronto, Canada
Domain Age
—
HTTP
200 · 27.1s
SSL
Valid· WE1, Google Trust Services, US
Status
COMPLETED
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
MatchPoint
Vendors
26/30
Status
partial
✓ avast✓ avg✓ bitdefender✗ brightcloud✗ drweb✓ eset✓ microsoft✗ norton✓ polyswarm✓ sophos✗ threatyeti✓ apple✓ yandex✓ cisa✓ isitphish✓ urlquery✓ urlscan✓ emsisoft✓ openphish✓ phishtank✓ apwg✓ spamhaus✓ netcraft✓ virustotal✓ phishreport✓ google✓ urlabuse✓ kaspersky✓ mcafee✓ fortiguard
Registered-domain escalation
Submit teniskortu34.shop as the primary IOC, enriched with evidence from hostile subdomains like www.teniskortu34.shop.
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
Unknown
UnknownOther · 7/19/2026
Summary
The website teniskortu34.shop presents itself as a tennis court rental service, but the evidence suggests potential malicious intent. The SSL certificate was issued just recently, and there are POST requests to suspicious endpoints, including one to 'fixbonus1.com', which raises concerns about data exfiltration. Additionally, the presence of Cloudflare indicates possible evasion of security measures.
Evidence Summary
▸Observed 3 capture stage(s); canonical stage is late_render_3s.
▸POST targets observed during capture: https://www.teniskortu34.shop/cdn-cgi/challenge-platform/h/b/jsd/oneshot/80a697ecdece/0.8147419403215237:1783335930:V0aoZzLMWzxPGg0vnLee6mQJkG8vX8sBbc2GHTLy9Co/a16e829a0e99f282, https://fixbonus1.com/cdn-cgi/rum?.
▸Distinctive asset clues: email-decode.min.js, frontend.min.js, main.min.css, style.min.css, logo-matchpoint.png, matchpoint-tennis-ball-a22dfd-768x596.jpg.
Capture
Stages: 3
Canonical: Late Render (+3s)
Changed: No
Credential Signals
Forms: 0
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 64
Hosts: 7
Domains: 7
Attack Techniques (1)
POST requests to suspicious endpoints
Indicators of Compromise (1)
▸POST target: https://www.teniskortu34.shop/cdn-cgi/challenge-platform/h/b/jsd/oneshot/80a697ecdece/0.8147419403215237:1783335930:V0aoZzLMWzxPGg0vnLee6mQJkG8vX8sBbc2GHTLy9Co/a16e829a0e99f282
Risk AssessmentUsed in abuse reports
The scan of teniskortu34.shop indicates potential malicious activity, particularly with recent SSL certificate issuance and POST requests to suspicious endpoints. The presence of Cloudflare suggests the site operator is attempting to evade detection by security tools. Given these factors, it is recommended to monitor this domain closely for any further developments.
Recommended Action
Monitor
Cross-Reference9
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API