# PhishDestroy domain threat record: bodygloveofficial.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/bodygloveofficial.shop/ Machine-readable companion: https://phishdestroy.io/domain/bodygloveofficial.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: not observed active - First observed by PhishDestroy: 2026-10-20 19:11:17 UTC - Last availability or vendor check: 2026-10-21 22:32:48 UTC - Stored record updated: 2026-10-21 22:32:48 UTC - VirusTotal detections in the stored snapshot: 6/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 162.222.90.208 - Registrar in stored WHOIS data: Dynadot Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-05-19 23:25:16 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a15ab8-2889-7445-9ff0-869e234ce4b9/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bodygloveofficial.shop - Certificate Transparency search: https://crt.sh/?q=%25.bodygloveofficial.shop - Web Archive lookup: https://web.archive.org/web/*/https://bodygloveofficial.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s intake AI on 2026-10-20 classified bodygloveofficial.shop as malicious because it impersonates the Body Glove brand, uses its logo and product copy, and advertises large discounts on a non‑official .shop domain. The recorded page title reads “Wetsuits, Swim Gear, & Surf Apparel | Body Glove” and the excerpt shows “Up to 70% Off Selected ItemsShop Sale”. PhishDestroy first observed the domain on 2026-10-20 and an HTTP 200 response was recorded on 2026-10-21. How the scam works Fake online stores copy well‑known brand names and visuals, then lure shoppers with exaggerated discounts to capture payment details, personal information, or cryptocurrency transfers. Victims are typically prompted to complete a purchase, after which the promised goods never arrive and the attacker retains the submitted data. Evidence VirusTotal analysis on 2026-10-18 detected the domain as malicious in 6 of 92 engines, with CRDF, G‑Data, Netcraft, LevelBlue, Gridinsoft and alphaMountain.ai labeling it malicious, phishing or suspicious. Google Safe Browsing checked on 2026-10-21 did not flag the site. urlscan captured the page on 2026-10-20 and returned a malicious verdict with a 100 score, categorising it as phishing and a fake shop. OTX listed four pulses referencing the domain as of 2026-10-21. PhishDestroy’s internal blocklist marks the domain as malicious (checked 2026-10-21) while external blocklists reported zero listings. Infrastructure The site resolved to IP 162.222.90.208, belonging to AS199242 Malakmadze Web LLC in the United States. TLS was provided by a Let’s Encrypt / YE2 certificate, verified on 2026-10-21. What to do Visitors should avoid entering any credentials, payment information or cryptocurrency addresses on the site; if such data was submitted, change related passwords and monitor financial accounts for unauthorized activity. Defenders should add the exact domain bodygloveofficial.shop to blocklists or URL‑filtering rules and review access logs for connections to that address. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a15ab8-2889-7445-9ff0-869e234ce4b9/ VirusTotal report: https://www.virustotal.com/gui/domain/bodygloveofficial.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bodygloveofficial.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-21 00:37:04 UTC ## Stored page captures - Primary capture: https://i.ibb.co/S42N0Lzy/da6fda393ebd.png Captured: 2026-10-20 19:11:17 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a15ab8-2889-7445-9ff0-869e234ce4b9.png Captured: 2026-10-20 19:11:17 UTC Source report: https://urlscan.io/result/01a15ab8-2889-7445-9ff0-869e234ce4b9/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/2d3f2b72-32f6-48ca-8f9a-fb479e802c80.png Captured: 2026-10-20 19:12:11 UTC Source report: https://radar.cloudflare.com/scan/2d3f2b72-32f6-48ca-8f9a-fb479e802c80 SHA-256: 3e5ee1b593d333961aa9b6189ba00d4e2f0070acc7e24c3514ebcb150670c20b - URLQuery: https://screenshots.phishdestroy.io/uq/8bc21e59-ec01-4dd5-80eb-4225f5ece0e0.png Source report: https://urlquery.net/report/8bc21e59-ec01-4dd5-80eb-4225f5ece0e0 SHA-256: 4e102c32119653f4f93b72478262b191062de1bb148236d97913a0bda169344f - URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15abd-9afd-7397-b478-27913c8b8e31.png Captured: 2026-10-20 19:15:47 UTC Source report: https://urlscan.io/result/01a15abd-9afd-7397-b478-27913c8b8e31/ SHA-256: e85696b71e00e5da3f666e2c94c5e5b45e1acb484b4f3270212ba320ba979b77 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-20T19:24:47Z", "uuid": "01a15ab8-2889-7445-9ff0-869e234ce4b9", "scanned_at": "2026-10-20T19:09:54Z", "final_url": "https://bodygloveofficial.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bodygloveofficial.shop/", "from": "http://bodygloveofficial.shop/", "status": 307 } ], "ip": "162.222.90.208", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.251.179.94", "173.194.68.95", "162.222.90.208" ], "asns": [ "15169", "199242" ], "countries": [ "US", "GE" ], "doc_hash": "b45e36c4aab8062336b718e38865dbf71c508f6391a8603509cd1788b6716e56", "script_hashes": [ "53d825afdfbad22fcc0c2aa0afff4ab38d132bf28a23c5bc54306e6482cc2c38", "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f", "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe", "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5", "91eb4c6e12d5d0f37080b53c6a8b513c579db4854839928eb478164ef6dc1d65", "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e", "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0", "54674023c15e7c7d2c117eacd9399f7e7ff4a224093be6fbd07fba4480b882ba", "ef598e4df04d2d336c9267057130a0ab7a499d928810f0bceb6393f28a5fcb03", "915eca2ddd30cf0f0dcf655424d66e36e55d66a038b3365bfff815980b355c29" ], "globals": [ "__next_f", "webpackChunk_N_E", "next", "_N_E_STYLE_LOAD", "Prism" ], "cookies": [ "_cd3_cid", "_cd3_rg", "_cd3_rid", "_site_domain" ], "storage_keys": [ "analytics_session_id", "analytics_session_id_ts", "__analytics_utm__", "analytics_visitor_id" ], "tls": { "san": [ "bodygloveofficial.shop" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "bodygloveofficial.shop", "protocol": "TLS 1.3", "valid_to": "2027-01-07T20:36:15Z", "valid_from": "2026-10-09T20:36:16Z" }, "domain_age_days": 152, "apex_age_days": 152, "tls_age_days": 10, "tls_valid_days": 89, "requests": 43, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 95, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "content-type": "text/html; charset=utf-8", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-20T19:36:04Z", "uuid": "2d3f2b72-32f6-48ca-8f9a-fb479e802c80", "scanned_at": "2026-10-20T19:12:11Z", "final_url": "https://bodygloveofficial.shop/", "status": 200, "history": [ { "url": "https://bodygloveofficial.shop/", "status": 200 } ], "dom_hash": "91cd4321b6fbbdbbe330a0ca0e7dcd361f7d89d08b106f61a23a0822753f63c8", "doc_hash": "338db3af75bb587c63ce22c6a7c4a684875c7c432b949239dcbf93dfbe1b3add", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bodygloveofficial.shop", "type": "A", "value": "162.222.90.208" } ], "dnssec_valid": false, "ip": "162.222.90.208" }, "vt": { "v": 1, "fetched_at": "2026-10-21T00:35:55Z", "analysis_at": "2026-10-18T03:22:29Z", "stats": { "timeout": 0, "harmless": 52, "malicious": 4, "suspicious": 2, "undetected": 34 }, "detections": { "CRDF": "malicious", "G-Data": "malware", "Netcraft": "malicious", "LevelBlue": "phishing", "Gridinsoft": "suspicious", "alphaMountain.ai": "suspicious" }, "reputation": 0, "categories": { "alphaMountain.ai": "Suspicious (alphaMountain.ai)", "Forcepoint ThreatSeeker": "shopping" }, "first_seen": "2026-05-22T19:49:29Z", "dns": [ { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "anton.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "162.222.90.208" }, { "ttl": 21600, "type": "NS", "value": "anton.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "zainab.ns.cloudflare.com" } ], "dns_at": "2026-10-18T03:22:45Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "bodygloveofficial.shop" ], "issuer": "Let's Encrypt / YE2", "serial": "56293d7304b2564aebab238c8ba74ebf24b", "sha256": "ba1dd0f9678da6337a323c9b8f0ff1274c38a4ffe46a95310be6bf5216bd1fd6", "subject": "bodygloveofficial.shop", "valid_to": "2027-01-07T20:36:15Z", "valid_from": "2026-10-09T20:36:16Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-20T23:38:54Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bodygloveofficial.shop" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-20T19:15:07Z", "first": "2026-10-20T19:15:07Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 59143 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443, 8000 ] }, "dns_server": { "ns": [ { "ip": "162.159.44.175", "host": "anton.ns.cloudflare.com" }, { "ip": "162.159.38.149", "host": "zainab.ns.cloudflare.com" } ], "zone": "bodygloveofficial.shop" }, "location": { "ip": "162.222.90.208", "asn": "199242", "org": "Malakmadze Web LLC", "country": "GE" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "bodygloveofficial.shop" }, "dns": { "A": [ "162.222.90.208" ], "NS": [ "anton.ns.cloudflare.com", "zainab.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"anton.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417016847, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "162.222.90.208", "family": 4 } } } ```