# PhishDestroy domain threat record: bnwstudio.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/bnwstudio.shop/ Machine-readable companion: https://phishdestroy.io/domain/bnwstudio.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-20 18:50:00 UTC - Last availability or vendor check: 2026-10-21 10:00:22 UTC - Stored record updated: 2026-10-21 18:20:55 UTC - VirusTotal detections in the stored snapshot: 9/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.244.119.61 - Registrar in stored WHOIS data: Dynadot Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-05-15 04:50:02 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a15aa4-86f7-723a-8dc1-489fbec19b38/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bnwstudio.shop - Certificate Transparency search: https://crt.sh/?q=%25.bnwstudio.shop - Web Archive lookup: https://web.archive.org/web/*/https://bnwstudio.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy has added bnwstudio.shop to its internal blocklist as a suspicious domain. The recorded page title is “Organic Body Butters, Essential & Carrier Oils for DIY | Bulk Naturals”. The domain was first seen by PhishDestroy on 2026-10-20. How the scam works The listing does not identify a specific malicious technique; the domain could be used for typical phishing, fraudulent commerce, or malware distribution, but no concrete behavior was observed on the page. Without a defined scheme, the risk remains uncertain and should be treated as potentially harmful. Evidence VirusTotal scanned the domain on 2026-10-11 and reported 9 detections out of 92 engines, with vendors such as BitDefender, ESET, G-Data and others flagging it. Google Safe Browsing checked on 2026-10-20 did not flag the site. No external blocklists listed the domain as of 2026-10-20, while PhishDestroy’s internal list marked it as suspicious on the same date. OTX recorded three pulses referencing bnwstudio.shop on 2026-10-20. Infrastructure The recorded IP address for bnwstudio.shop is 188.244.119.61. A TLS certificate issued by Let’s Encrypt / YE2 was observed on 2026-10-20. What to do Visitors should treat the site as untrusted, avoid entering personal or financial information, and do not download any files. If any credentials were submitted, change them immediately. Defenders should block traffic to 188.244.119.61 and monitor logs for any access attempts to bnwstudio.shop. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a15aa4-86f7-723a-8dc1-489fbec19b38/ VirusTotal report: https://www.virustotal.com/gui/domain/bnwstudio.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bnwstudio.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-20 19:22:37 UTC ## Stored page captures - Primary capture: https://i.ibb.co/LDzM245V/b27bcf151977.png Captured: 2026-10-20 18:50:00 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a15aa4-86f7-723a-8dc1-489fbec19b38.png Captured: 2026-10-20 18:50:00 UTC Source report: https://urlscan.io/result/01a15aa4-86f7-723a-8dc1-489fbec19b38/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/08300bfe-1793-41ef-ba15-724fd09b1caf.png Captured: 2026-10-20 19:21:51 UTC Source report: https://radar.cloudflare.com/scan/08300bfe-1793-41ef-ba15-724fd09b1caf SHA-256: 336739d1c9a0e60ce0dcd4d392a7970498dbbfd1fb33f613d4093cc8946762a6 - URLQuery: https://screenshots.phishdestroy.io/uq/092c7644-528b-4193-b5dc-70e9e20d6c55.png Source report: https://urlquery.net/report/092c7644-528b-4193-b5dc-70e9e20d6c55 SHA-256: 5336140ecb66ab536db1b99b2e86b1d74e14e7d7dc08f4942a25b3ba6ccea2c2 - URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15aa6-4518-735b-990a-85310c435900.png Captured: 2026-10-20 18:50:17 UTC Source report: https://urlscan.io/result/01a15aa6-4518-735b-990a-85310c435900/ SHA-256: 98b906430e1bb6236141ce9e6afac7e6ad6517454c6747e1fecabe520e740d16 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-20T19:24:54Z", "uuid": "01a15aa4-86f7-723a-8dc1-489fbec19b38", "scanned_at": "2026-10-20T18:48:25Z", "final_url": "https://bnwstudio.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bnwstudio.shop/", "from": "http://bnwstudio.shop/", "status": 307 } ], "ip": "188.244.119.61", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.251.163.94", "172.253.122.95", "188.244.119.61" ], "asns": [ "15169", "199242" ], "countries": [ "US", "GE" ], "doc_hash": "84fe17f7e68a6695e7c86991f698c84ff9f413ed7d8227f207f922aaef927e26", "script_hashes": [ "21bd8330e680d74e794ed909f85be2bc7cba52632988b835f36408ddb6b360e8", "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f", "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe", "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5", "b9adf20c93dc3a7aa37cdb5f5b6d86d4252964d97a6cf3fd5ce6f143da225d82", "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e", "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0", "cac7c96146dad0bbe55d718c23f7af31cca28565413d9915c256932a69ae83df", "ef598e4df04d2d336c9267057130a0ab7a499d928810f0bceb6393f28a5fcb03", "915eca2ddd30cf0f0dcf655424d66e36e55d66a038b3365bfff815980b355c29" ], "globals": [ "__next_f", "webpackChunk_N_E", "_N_E", "next", "_N_E_STYLE_LOAD", "Prism" ], "cookies": [ "_7li_cid", "_7li_rg", "_7li_rid", "_site_domain" ], "storage_keys": [ "analytics_session_id", "analytics_session_id_ts", "__analytics_utm__", "analytics_visitor_id" ], "tls": { "san": [ "bnwstudio.shop" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "bnwstudio.shop", "protocol": "TLS 1.3", "valid_to": "2026-12-10T11:15:32Z", "valid_from": "2026-09-11T11:15:33Z" }, "domain_age_days": 158, "apex_age_days": 158, "tls_age_days": 39, "tls_valid_days": 89, "requests": 47, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 94, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "content-type": "text/html; charset=utf-8", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-20T19:36:13Z", "uuid": "08300bfe-1793-41ef-ba15-724fd09b1caf", "scanned_at": "2026-10-20T19:21:51Z", "final_url": "https://bnwstudio.shop/", "status": 200, "history": [ { "url": "https://bnwstudio.shop/", "status": 200 } ], "dom_hash": "613509ebda84c19fa14929f27dcf7a4043952b4e27429326ef8c1df30798b604", "doc_hash": "87154ef71961cd312191d056b8f8b889c39544e0edd568bacb9b29718bd8de0f", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bnwstudio.shop", "type": "A", "value": "188.244.119.61" } ], "dnssec_valid": false, "ip": "188.244.119.61" }, "vt": { "v": 1, "fetched_at": "2026-10-20T18:50:50Z", "analysis_at": "2026-10-11T15:55:38Z", "stats": { "timeout": 0, "harmless": 50, "malicious": 5, "suspicious": 4, "undetected": 33 }, "detections": { "CRDF": "malicious", "ESET": "suspicious", "G-Data": "phishing", "Webroot": "malicious", "Netcraft": "malicious", "LevelBlue": "suspicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "suspicious" }, "reputation": 0, "first_seen": "2026-05-15T07:30:05Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "millie.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "amos.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "188.244.119.61" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "amos.ns.cloudflare.com" } ], "dns_at": "2026-10-11T16:46:22Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "bnwstudio.shop" ], "issuer": "Let's Encrypt / YE2", "serial": "538b9fc1f0669465500eec2de38a8407cb8", "sha256": "439adf613f061e0f119ac595e6c07d4e615ad78b6ebe9c9cddae7efd4bf251d7", "subject": "bnwstudio.shop", "valid_to": "2026-12-10T11:15:32Z", "valid_from": "2026-09-11T11:15:33Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T01:46:55Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bnwstudio.shop" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "robots_txt": { "present": true, "sitemaps": [ "https://bnwstudio.shop/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 621 }, "social_tags": { "title": "Organic Body Butters, Essential & Carrier Oils for DIY | Bulk Naturals", "ogImage": "https://bnwstudio.shop/opengraph-image.jpg", "ogTitle": "Organic Body Butters, Essential & Carrier Oils for DIY", "description": "Find high quality, globally sourced, affordable cosmetic ingredients at Bulk Naturals. Shop eco-friendly collections for soap making, haircare, and skincare.", "twitterCard": "summary_large_image", "ogDescription": "Find high quality, globally sourced, affordable cosmetic ingredients at Bulk Naturals. Shop eco-friendly collections for soap making, haircare, and skincare." }, "trackers": { "requests": 37, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 16, "tls": 182, "wait": 204, "connect": 162, "download": 678 }, "response_ms": 1242 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 245018, "co2_grams": 0.009, "cleaner_than": 3 }, "dns_server": { "ns": [ { "ip": "172.64.34.181", "host": "millie.ns.cloudflare.com" }, { "ip": "108.162.195.120", "host": "amos.ns.cloudflare.com" } ], "zone": "bnwstudio.shop" }, "cookies": { "cookies": [ { "name": "_7li_cid" }, { "name": "_7li_rg" }, { "name": "_7li_rid" }, { "name": "_site_domain" } ] }, "location": { "ip": "188.244.119.61", "asn": "199242", "org": "Malakmadze Web LLC", "country": "GE" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "bnwstudio.shop" }, "dns": { "A": [ "188.244.119.61" ], "NS": [ "millie.ns.cloudflare.com", "amos.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"amos.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415929614, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": "1; mode=block", "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "188.244.119.61", "family": 4 }, "redirects": { "chain": [ "https://bnwstudio.shop" ] }, "tech_stack": { "technologies": [ "Cart Functionality", "Node.js", "React", "Next.js", "Priority Hints", "Google Font API", "Webpack", "Prism", "Open Graph", "Module Federation", "HTTP/3" ] }, "linked_pages": { "internal_count": 26 }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } } } } ```