# PhishDestroy domain threat record: bohemiumsoultrade.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/bohemiumsoultrade.com/
Machine-readable companion: https://phishdestroy.io/domain/bohemiumsoultrade.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 08:58:09 UTC
- Last availability or vendor check: 2026-10-23 11:24:24 UTC
- Stored record updated: 2026-10-23 14:20:47 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date (registry RDAP, bohemiumsoultrade.com): 2026-07-12 22:21:12 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a167f9-86c7-7280-9d04-717bc8da1f28/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/bohemiumsoultrade.com
- Certificate Transparency search: https://crt.sh/?q=%25.bohemiumsoultrade.com
- Web Archive lookup: https://web.archive.org/web/*/https://bohemiumsoultrade.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added bohemiumsoultrade.com to its internal blocklist on 2026-10-23 after automated analysis flagged it as high risk. The recorded page title was "Bohemium Soul" and did not clearly identify a legitimate service. An HTTP GET on the domain returned a 200 status code on 2026-10-23, confirming the site was reachable at that time.

How the scam works
The vendor detections collectively indicate a generic phishing risk, where a malicious site may attempt to collect credentials or personal data. No credential‑stealing form, wallet request, or malware download was observed in the captured page snapshot, so the assessment relies on the aggregated malicious labels rather than concrete behavior.

Evidence
VirusTotal scanned the domain on 2026-10-18 and reported 14 malicious and 3 suspicious detections out of 92 engines (17 total). Google Safe Browsing checked the URL on 2026-10-23 and did not flag it. urlscan.io captured the site on 2026-10-23; its engine verdicts marked the URL malicious with a score of 97 while the overall verdict was neutral, and Cloudflare Radar on the same day returned a malicious verdict with malware and phishing tags. PhishDestroy’s internal blocklist marked the domain as blocked, external blocklists showed zero hits on 2026-10-23, and OTX listed three pulses referencing the domain.

Infrastructure
The domain was registered with Dynadot Inc on 2026-07-12 (creation date 2026-07-13) and set to expire on 2027-07-12. The recorded IP address was 158.94.210.119 and the associated network name was Omegatech LTD in the Netherlands. The site used a Let's Encrypt TLS certificate valid from 2026-09-12 to 2026-12-11. DNS records observed on 2026-10-18 included an A record for the recorded IP, MX pointing to parkmail.dynadot.com, and NS records ns1.dyna-ns.net and ns2.dyna-ns.net; DNSSEC was not enabled.

What to do
Visitors should avoid entering any login credentials, personal information, or cryptocurrency details on this site; if they have already done so, they should change the affected passwords and monitor accounts for unauthorized activity. Security teams should add the exact hostname bohemiumsoultrade.com to block lists or URL filtering rules and review logs for any connections to that domain.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a167f9-86c7-7280-9d04-717bc8da1f28/
Cloudflare Radar report: https://radar.cloudflare.com/scan/43632a7b-f2e2-4a78-ab05-6fb905e906d6
URLQuery report: https://urlquery.net/report/e7dec179-efe3-4421-9d13-6d58a95081d3
Stored capture screenshot: https://urlscan.io/screenshots/01a167f9-86c7-7280-9d04-717bc8da1f28.png
Cloudflare Radar screenshot (2026-10-23T09:31:09Z): https://screenshots.phishdestroy.io/cf/43632a7b-f2e2-4a78-ab05-6fb905e906d6.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/e7dec179-efe3-4421-9d13-6d58a95081d3.png
URLScan screenshot (2026-10-23T09:11:06Z): https://screenshots.phishdestroy.io/us/01a16807-1f4f-76bb-b147-230574817605.png
URLScan capture report: https://urlscan.io/result/01a16807-1f4f-76bb-b147-230574817605/
VirusTotal report: https://www.virustotal.com/gui/domain/bohemiumsoultrade.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bohemiumsoultrade.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 09:32:18 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a167f9-86c7-7280-9d04-717bc8da1f28.png
  Captured: 2026-10-23 08:58:09 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a167f9-86c7-7280-9d04-717bc8da1f28.png
  Captured: 2026-10-23 08:58:09 UTC
  Source report: https://urlscan.io/result/01a167f9-86c7-7280-9d04-717bc8da1f28/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/43632a7b-f2e2-4a78-ab05-6fb905e906d6.png
  Captured: 2026-10-23 09:31:09 UTC
  Source report: https://radar.cloudflare.com/scan/43632a7b-f2e2-4a78-ab05-6fb905e906d6
  SHA-256: 85e5023d9df011d184274569e84aa5621c5f2c979151e9e997926d0b0460c474
- URLQuery: https://screenshots.phishdestroy.io/uq/e7dec179-efe3-4421-9d13-6d58a95081d3.png
  Source report: https://urlquery.net/report/e7dec179-efe3-4421-9d13-6d58a95081d3
  SHA-256: b7cedb5fa5552743e46ac9d3282f61ceacaca2c97a742a9b94a8ea740ebee11a
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16807-1f4f-76bb-b147-230574817605.png
  Captured: 2026-10-23 09:11:06 UTC
  Source report: https://urlscan.io/result/01a16807-1f4f-76bb-b147-230574817605/
  SHA-256: a6992817653aa0c2cff485acf79d2737e41da51fe389f72a03d09f822e70ec3c

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T09:31:28Z",
        "uuid": "01a167f9-86c7-7280-9d04-717bc8da1f28",
        "scanned_at": "2026-10-23T08:56:18Z",
        "final_url": "https://bohemiumsoultrade.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://bohemiumsoultrade.com/",
                "from": "http://bohemiumsoultrade.com/",
                "status": 307
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "5052d7d6d9446c1beff087961c84679e318dbe717d3c9436af751a8de7d53610",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput",
            "navToggle",
            "mainNav",
            "langBtn",
            "langDropdown"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "*.bohemiumsoultrade.com",
                "bohemiumsoultrade.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "bohemiumsoultrade.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-11T17:50:23Z",
            "valid_from": "2026-09-12T17:50:24Z"
        },
        "domain_age_days": 102,
        "apex_age_days": 102,
        "tls_age_days": 40,
        "tls_valid_days": 89,
        "requests": 5,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T09:31:30Z",
        "uuid": "43632a7b-f2e2-4a78-ab05-6fb905e906d6",
        "scanned_at": "2026-10-23T09:31:09Z",
        "final_url": "https://bohemiumsoultrade.com/",
        "status": 200,
        "history": [
            {
                "url": "https://bohemiumsoultrade.com/",
                "status": 200
            }
        ],
        "dom_hash": "88b7c9826158070f90182108805603c8e9c0408c38265b09596c30fddbd79a7a",
        "doc_hash": "849a07f4743118bafa7ef14a07dd1416955937451f76cfac8e2f981c51b911de",
        "phishing_v2": [
            "phishing"
        ],
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "Scam",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "bohemiumsoultrade.com",
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dnssec_valid": false,
        "ip": "158.94.210.119",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-07-12T22:21:12Z",
            "updated": "2026-08-13T12:43:05Z",
            "expires": "2027-07-12T22:21:12Z",
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T09:31:01Z",
        "analysis_at": "2026-10-18T17:46:12Z",
        "stats": {
            "timeout": 0,
            "harmless": 42,
            "malicious": 14,
            "suspicious": 3,
            "undetected": 33
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "malware",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "registrar": "Dynadot Inc",
        "created": "2026-07-12T22:21:12Z",
        "expires": "2027-07-12T22:21:12Z",
        "updated": "2026-08-13T12:43:05Z",
        "first_seen": "2026-07-12T22:40:10Z",
        "dns": [
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.bohemiumsoultrade.com",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "parkmail.dynadot.com",
                "priority": 0
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            }
        ],
        "dns_at": "2026-10-18T17:51:42Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "*.bohemiumsoultrade.com",
                "bohemiumsoultrade.com"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "641bb23f88ff985ee25f84d2e05c04d8a32",
            "sha256": "86ca1396498261646fba52f85c37b1f963a43ee834a3f3d3a29498780b9bf5a3",
            "subject": "bohemiumsoultrade.com",
            "valid_to": "2026-12-11T17:50:23Z",
            "valid_from": "2026-09-12T17:50:24Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-07-12T22:21:12Z",
            "updated": "2026-08-13T12:43:05Z",
            "expires": "2027-07-12T22:21:12Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-07-12T22:21:12Z",
                "last changed": "2026-09-12T18:48:59Z",
                "registration": "2026-07-12T22:21:12Z",
                "registrar expiration": "2027-07-12T22:21:12Z",
                "last update of RDAP database": "2026-10-13T09:46:20Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T09:31:43Z",
        "mail_config": {
            "mx": [
                "parkmail.dynadot.com"
            ],
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "bohemiumsoultrade.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-23T09:00:37Z",
            "first": "2026-10-12T17:11:00Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.09,
            "avg_page_bytes": 16567
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://bohemiumsoultrade.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Inteligentní obchodní platforma nové generace — Cesta Evocorex",
            "robots": "index, follow",
            "description": "187+ globálních trhů. Prediktivní modelování s empirickou validací. Cesta Evocorex je váš automatizovaný obchodní systém pro dynamická tržní prostředí.",
            "canonicalUrl": "https://bohemiumsoultrade.com/"
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 478,
                "tls": 82,
                "wait": 85,
                "connect": 73,
                "download": 145
            },
            "response_ms": 863
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 82340,
            "co2_grams": 0.003,
            "cleaner_than": 26
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.26.92",
                    "host": "ns1.dyna-ns.net"
                },
                {
                    "ip": "162.159.24.5",
                    "host": "ns2.dyna-ns.net"
                }
            ],
            "zone": "bohemiumsoultrade.com"
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "bohemiumsoultrade.com"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "MX": [
                "{\"exchange\": \"parkmail.dynadot.com\", \"priority\": 0}"
            ],
            "NS": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.bohemiumsoultrade.com\", \"serial\": 2026092801, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://bohemiumsoultrade.com"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.bohemiumsoultrade.com"
            ]
        },
        "linked_pages": {
            "internal_count": 27
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-07-12T22:21:12Z",
            "updated": "2026-08-13T12:43:05Z",
            "expires": "2027-07-12T22:21:12Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```