# PhishDestroy domain threat record: bohmeapparel.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/bohmeapparel.shop/ Machine-readable companion: https://phishdestroy.io/domain/bohmeapparel.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: not observed active - First observed by PhishDestroy: 2026-10-20 20:02:17 UTC - Last availability or vendor check: 2026-10-21 22:32:48 UTC - Stored record updated: 2026-10-21 22:32:48 UTC - VirusTotal detections in the stored snapshot: 5/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: paypal ## Stored infrastructure - Observed IP address: 46.245.239.109 - Registrar in stored WHOIS data: Dynadot Inc. - Last stored HTTP status: 200 - Registration date (registry RDAP, bohmeapparel.shop): 2026-06-06 09:54:34 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a15aec-86d5-71b0-a8ed-05f6124f47e6/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bohmeapparel.shop - Certificate Transparency search: https://crt.sh/?q=%25.bohmeapparel.shop - Web Archive lookup: https://web.archive.org/web/*/https://bohmeapparel.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy has listed bohmeapparel.shop as a suspicious domain based on observed indicators. The domain was first seen by PhishDestroy on 2026-10-20. The recorded page title is “Browse Our Curated Selection of High Quality & Unique Clothing | Bohme”. How the scam works Because the domain is flagged without a concrete scam type, the exact malicious behavior is unclear; it could be used for phishing, fraud, or other illicit activities, but no evidence confirms a particular method. The page title only advertises clothing and does not prove any fraudulent intent. Evidence VirusTotal scanned the domain on 2026-10-15 and reported 5 detections from 92 engines, with flagging vendors alphaMountain.ai, CRDF, Gridinsoft, LevelBlue and Netcraft. Google Safe Browsing checked on 2026-10-20 reported no threat. External blocklists checked on 2026-10-20 returned no matches, while PhishDestroy’s internal blocklist listed the domain on that date. OTX checked on 2026-10-20 showed zero pulses. Infrastructure The recorded IP address for bohmeapparel.shop is 46.245.239.109. No additional registration or CDN details are available in the current evidence. What to do Visitors should avoid entering personal or payment information on the site and should monitor accounts for unexpected activity. If credentials were entered, change passwords immediately. Defenders should add the exact domain to blocklists and monitor network logs for connections to 46.245.239.109. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1176f-7c20-72dc-a711-d26a0c46467f/ VirusTotal report: https://www.virustotal.com/gui/domain/bohmeapparel.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bohmeapparel.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-20 20:05:14 UTC ## Stored page captures - Primary capture: https://i.ibb.co/d0MBjGJ2/c7a0700d5183.png Captured: 2026-10-20 20:07:51 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a15aec-86d5-71b0-a8ed-05f6124f47e6.png Captured: 2026-10-20 20:07:51 UTC Source report: https://urlscan.io/result/01a15aec-86d5-71b0-a8ed-05f6124f47e6/ - URLScan capture 2: https://screenshots.phishdestroy.io/01a1176f-7c20-72dc-a711-d26a0c46467f.png Captured: 2026-10-20 20:02:17 UTC Source report: https://urlscan.io/result/01a15aec-86d5-71b0-a8ed-05f6124f47e6/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e043dc03-a529-4e4b-bb8c-b41c4e3956a7.png Captured: 2026-10-20 20:04:02 UTC Source report: https://radar.cloudflare.com/scan/e043dc03-a529-4e4b-bb8c-b41c4e3956a7 SHA-256: eca17bec23cd91e19ae1435b32afdd6e8e038a0aefee9752e7bfd647d39486c1 - URLQuery: https://screenshots.phishdestroy.io/uq/6a55dcde-9751-4a0e-8953-013432ca472a.png Source report: https://urlquery.net/report/6a55dcde-9751-4a0e-8953-013432ca472a SHA-256: 278e0fddeb0abed0908e99f428e46e75d17cdc4b2bd9de4a84b2bd795bcbe1f9 - URLScan · 2026-10-07: https://screenshots.phishdestroy.io/us/01a1176f-7c20-72dc-a711-d26a0c46467f.png Captured: 2026-10-07 17:35:52 UTC Source report: https://urlscan.io/result/01a1176f-7c20-72dc-a711-d26a0c46467f/ SHA-256: 577a5b4b97b07aa6efae038387102b5aa8530324e0c69439eb592fef2cb980f8 - URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15aec-eca2-777f-8655-1600187406cb.png Captured: 2026-10-20 20:07:29 UTC Source report: https://urlscan.io/result/01a15aec-eca2-777f-8655-1600187406cb/ SHA-256: 11de338f875166077a6b288dc6b6a8fa481d84fb526c7079e6720c54990dc8c2 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-20T20:51:19Z", "uuid": "01a15aec-86d5-71b0-a8ed-05f6124f47e6", "scanned_at": "2026-10-20T20:07:01Z", "final_url": "https://bohmeapparel.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bohmeapparel.shop/", "from": "http://bohmeapparel.shop/", "status": 307 } ], "ip": "46.245.239.109", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.251.13.94", "2a00:1450:4001:c25::5f", "46.245.239.109" ], "asns": [ "15169", "199242" ], "countries": [ "US", "DE", "GE" ], "doc_hash": "148fbb4a7b589b8508ae5916a64ccee709c07cf810e28140d5e47105aa9ba0e8", "script_hashes": [ "7302d96ee0c7d033dff721d1d98ecc615fb2f9936d2589d9c82e0acdf3815d50", "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f", "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe", "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5", "91eb4c6e12d5d0f37080b53c6a8b513c579db4854839928eb478164ef6dc1d65", "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e", "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0", "54674023c15e7c7d2c117eacd9399f7e7ff4a224093be6fbd07fba4480b882ba", "ef598e4df04d2d336c9267057130a0ab7a499d928810f0bceb6393f28a5fcb03", "915eca2ddd30cf0f0dcf655424d66e36e55d66a038b3365bfff815980b355c29" ], "globals": [ "__next_f", "$RC", "webpackChunk_N_E", "next", "_N_E_STYLE_LOAD", "Prism" ], "cookies": [ "_uju_cid", "_uju_rg", "_uju_rid", "_site_domain" ], "storage_keys": [ "analytics_session_id", "analytics_session_id_ts", "__analytics_utm__", "analytics_visitor_id" ], "tls": { "san": [ "bohmeapparel.shop" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "bohmeapparel.shop", "protocol": "TLS 1.3", "valid_to": "2027-01-02T07:48:06Z", "valid_from": "2026-10-04T07:48:07Z" }, "domain_age_days": 136, "apex_age_days": 136, "tls_age_days": 16, "tls_valid_days": 89, "requests": 51, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 86, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "content-type": "text/html; charset=utf-8", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-20T21:02:49Z", "uuid": "e043dc03-a529-4e4b-bb8c-b41c4e3956a7", "scanned_at": "2026-10-20T20:04:02Z", "final_url": "https://bohmeapparel.shop/", "status": 200, "history": [ { "url": "https://bohmeapparel.shop/", "status": 200 } ], "dom_hash": "6b181947d5584a4ecfca016c606bd95b930d0ca5bf7fb7797fe4f8b90691b656", "doc_hash": "57c9d968bf0ba6535d368d301ad8aed5b9020df09c8d880d48ffa75af1b72e7d", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bohmeapparel.shop", "type": "A", "value": "46.245.239.109" } ], "dnssec_valid": false, "ip": "46.245.239.109" }, "vt": { "v": 1, "fetched_at": "2026-10-20T21:10:54Z", "analysis_at": "2026-10-15T09:38:48Z", "stats": { "timeout": 0, "harmless": 52, "malicious": 3, "suspicious": 2, "undetected": 35 }, "detections": { "CRDF": "malicious", "Netcraft": "malicious", "LevelBlue": "phishing", "Gridinsoft": "suspicious", "alphaMountain.ai": "suspicious" }, "reputation": 0, "first_seen": "2026-06-06T10:49:39Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "lilith.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "lilith.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "marvin.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "46.245.239.109" } ], "dns_at": "2026-10-15T09:39:04Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "bohmeapparel.shop" ], "issuer": "Let's Encrypt / YE1", "serial": "59df6b8da47de74503525878e2c63f92533", "sha256": "a058882c0979b604a250b415f98ad9b307f3b07acb7fb000e4e36b5e2cc86c70", "subject": "bohmeapparel.shop", "valid_to": "2027-01-02T07:48:06Z", "valid_from": "2026-10-04T07:48:07Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-20T20:12:54Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bohmeapparel.shop" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-20T20:05:47Z", "first": "2026-10-20T20:05:47Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 64880 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443, 8000 ] }, "dns_server": { "ns": [ { "ip": "172.64.35.251", "host": "marvin.ns.cloudflare.com" }, { "ip": "162.159.38.143", "host": "lilith.ns.cloudflare.com" } ], "zone": "bohmeapparel.shop" }, "location": { "ip": "46.245.239.109", "asn": "199242", "org": "Malakmadze Web LLC", "country": "GE" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "bohmeapparel.shop" } } } ```