# PhishDestroy domain threat record: boldbrick.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/boldbrick.shop/ Machine-readable companion: https://phishdestroy.io/domain/boldbrick.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-20 20:14:52 UTC - Last availability or vendor check: 2026-10-21 10:00:26 UTC - Stored record updated: 2026-10-21 20:38:21 UTC - VirusTotal detections in the stored snapshot: 11/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: paypal ## Stored infrastructure - Observed IP address: 37.72.142.130 - Registrar in stored WHOIS data: Dynadot Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-05-15 14:55:50 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a15af2-80c3-72c8-bb1a-282050ad27b5/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/boldbrick.shop - Certificate Transparency search: https://crt.sh/?q=%25.boldbrick.shop - Web Archive lookup: https://web.archive.org/web/*/https://boldbrick.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added boldbrick.shop to its internal blocklist on 2026-10-20. The recorded page title reads “Good Smile Company US | Good Smile US”. No classification date is supplied, so the listing reflects a current assessment rather than a proven incident. The domain was first observed by PhishDestroy on the same date. How the scam works Because no specific scheme was identified, the presence of detections alone does not confirm a particular malicious mechanism. In general, domains that attract multiple security engine flags may be used for phishing, fraud, or malware distribution, but the evidence here does not pinpoint any of those activities. Evidence VirusTotal reported 11 detections out of 92 scanning engines on 2026-10-20, with vendors including alphaMountain.ai, BitDefender, CRDF, ESET, Forcepoint ThreatSeeker, G-Data, Gridinsoft and LevelBlue. Google Safe Browsing checked the URL on 2026-10-20 and returned no warning. External blocklists showed zero matches on the same date, while PhishDestroy’s own internal list marked the domain as suspicious. OTX listed four pulses referencing the domain as of 2026-10-20. Infrastructure The recorded IP address for boldbrick.shop is 37.72.142.130. No further registration or hosting details are available, and the IP alone does not indicate operator identity or intent. What to do Visitors should avoid entering credentials or personal information on the site and monitor accounts for unexpected activity. If credentials were submitted, change passwords immediately. Security teams should add a rule to block traffic to boldbrick.shop and review logs for any access attempts. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a15af2-80c3-72c8-bb1a-282050ad27b5/ VirusTotal report: https://www.virustotal.com/gui/domain/boldbrick.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=boldbrick.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-20 20:47:21 UTC ## Stored page captures - Primary capture: https://i.ibb.co/vx25hPBg/f80f61d2f3de.png Captured: 2026-10-20 20:14:52 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a15af2-80c3-72c8-bb1a-282050ad27b5.png Captured: 2026-10-20 20:14:52 UTC Source report: https://urlscan.io/result/01a15af2-80c3-72c8-bb1a-282050ad27b5/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/2ba3e016-0f05-48f4-9be5-183c7eea7e28.png Captured: 2026-10-20 20:15:53 UTC Source report: https://radar.cloudflare.com/scan/2ba3e016-0f05-48f4-9be5-183c7eea7e28 SHA-256: d7d65f63cc4c4ef5bd9784fdcf72efaec770ae39aa9b0a5ea36768cd8ae70b8a - URLQuery: https://screenshots.phishdestroy.io/uq/7adf6e2b-bb70-4c93-bb23-107507d97e07.png Source report: https://urlquery.net/report/7adf6e2b-bb70-4c93-bb23-107507d97e07 SHA-256: 78db96fd4dd683f4e4a88d24db96ba206d359f82ef485f722963c5d51dd47efd - URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15af6-82fc-7098-9aba-e1e1992f61a1.png Captured: 2026-10-20 20:17:56 UTC Source report: https://urlscan.io/result/01a15af6-82fc-7098-9aba-e1e1992f61a1/ SHA-256: 40700ad8e60498b8017419ebaceafe8551bcc42813a5ab2806b5290660b60934 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-20T20:51:13Z", "uuid": "01a15af2-80c3-72c8-bb1a-282050ad27b5", "scanned_at": "2026-10-20T20:13:40Z", "final_url": "https://boldbrick.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://boldbrick.shop/", "from": "http://boldbrick.shop/", "status": 307 } ], "ip": "37.72.142.130", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.251.163.94", "172.253.115.95", "37.72.142.130" ], "asns": [ "15169", "199242" ], "countries": [ "US", "GE" ], "doc_hash": "46bf753768fd1f66976c7284e97eb10605c1dce74aa95e2289d95cf15c3d4dfd", "script_hashes": [ "66d8281fc1221b76be9090128cd41c8da92adeb9b43a15c8f16dc22ae21b5f99", "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f", "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe", "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5", "b9adf20c93dc3a7aa37cdb5f5b6d86d4252964d97a6cf3fd5ce6f143da225d82", "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e", "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0", "cac7c96146dad0bbe55d718c23f7af31cca28565413d9915c256932a69ae83df", "ef598e4df04d2d336c9267057130a0ab7a499d928810f0bceb6393f28a5fcb03", "915eca2ddd30cf0f0dcf655424d66e36e55d66a038b3365bfff815980b355c29" ], "globals": [ "__next_f", "webpackChunk_N_E", "next", "_N_E_STYLE_LOAD", "Prism" ], "cookies": [ "_r3u_cid", "_r3u_rg", "_r3u_rid", "_site_domain" ], "storage_keys": [ "analytics_session_id", "analytics_session_id_ts", "__analytics_utm__", "analytics_visitor_id" ], "tls": { "san": [ "boldbrick.shop" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "boldbrick.shop", "protocol": "TLS 1.3", "valid_to": "2026-12-11T15:16:00Z", "valid_from": "2026-09-12T15:16:01Z" }, "domain_age_days": 158, "apex_age_days": 158, "tls_age_days": 38, "tls_valid_days": 89, "requests": 93, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "content-type": "text/html; charset=utf-8", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-20T21:02:43Z", "uuid": "2ba3e016-0f05-48f4-9be5-183c7eea7e28", "scanned_at": "2026-10-20T20:15:53Z", "final_url": "https://boldbrick.shop/", "status": 200, "history": [ { "url": "https://boldbrick.shop/", "status": 200 } ], "dom_hash": "b451162514cec53102929a1c85dfdd9dec78faee2f0473562ed1da86d6b9d424", "doc_hash": "f923f61f116d68dd1ff5fd3e37ac79c2cd94b9c8e91b2ce3a145ffb368867375", "domain_risks": [ "Safe for Kids", "Clothing", "Society & Lifestyle", "Ecommerce", "Shopping & Auctions" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "boldbrick.shop", "type": "A", "value": "37.72.142.130" } ], "dnssec_valid": false, "ip": "37.72.142.130" }, "vt": { "v": 1, "fetched_at": "2026-10-20T21:10:47Z", "analysis_at": "2026-10-11T16:01:19Z", "stats": { "timeout": 0, "harmless": 47, "malicious": 9, "suspicious": 2, "undetected": 34 }, "detections": { "CRDF": "malicious", "ESET": "suspicious", "G-Data": "malware", "Lionic": "phishing", "Webroot": "malicious", "Netcraft": "malicious", "LevelBlue": "phishing", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "first_seen": "2026-05-15T17:49:52Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "millie.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "amos.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "amos.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "37.72.142.130" } ], "dns_at": "2026-10-11T17:00:34Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "boldbrick.shop" ], "issuer": "Let's Encrypt / YE1", "serial": "5b77463a3998175f07e4594f8902d7ef78f", "sha256": "b0bc3def60c1d4123f6114729ff652255eea0b1c6ad0db37dc788d19f35c455d", "subject": "boldbrick.shop", "valid_to": "2026-12-11T15:16:00Z", "valid_from": "2026-09-12T15:16:01Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T01:33:22Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "boldbrick.shop" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-20T20:16:36Z", "first": "2026-10-20T20:16:36Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 60719 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443, 8000 ] }, "dns_server": { "ns": [ { "ip": "172.64.35.120", "host": "amos.ns.cloudflare.com" }, { "ip": "162.159.38.181", "host": "millie.ns.cloudflare.com" } ], "zone": "boldbrick.shop" }, "location": { "ip": "37.72.142.130", "asn": "199242", "org": "Malakmadze Web LLC", "country": "GE" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "boldbrick.shop" }, "dns": { "A": [ "37.72.142.130" ], "NS": [ "amos.ns.cloudflare.com", "millie.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"amos.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414951904, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "37.72.142.130", "family": 4 } } } ```