# PhishDestroy domain threat record: bombayshirtcompanyshop.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/bombayshirtcompanyshop.shop/
Machine-readable companion: https://phishdestroy.io/domain/bombayshirtcompanyshop.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 01:36:34 UTC
- Last availability or vendor check: 2026-10-22 10:49:40 UTC
- Stored record updated: 2026-10-22 16:07:29 UTC
- VirusTotal detections in the stored snapshot: 6/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: stripe

## Stored infrastructure

- Observed IP address: 195.96.131.11
- Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND
- Last stored HTTP status: 200

## Evidence links

- URLScan report: https://urlscan.io/result/01a1613f-987d-72ff-a5df-6da4d1993b70/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/bombayshirtcompanyshop.shop
- Certificate Transparency search: https://crt.sh/?q=%25.bombayshirtcompanyshop.shop
- Web Archive lookup: https://web.archive.org/web/*/https://bombayshirtcompanyshop.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed bombayshirtcompanyshop.shop as a suspicious domain based on multiple malicious detections. The recorded page title reads "Shop Men's Tailored Shirts Online | Branded Made-To-Measure Shirts | Bombay Shirt Company". The domain was first seen by PhishDestroy on 2026-10-22.

How the scam works
The available evidence points to a typical fake‑shop or phishing pattern, where a site mimics a legitimate retail brand to lure visitors into providing personal or payment information. No specific credential‑harvesting form or payment flow was observed on the captured page, so the exact mechanism remains unconfirmed.

Evidence
VirusTotal reported six detections on 2026-10-22, with four vendors marking the domain malicious (CRDF, G-Data, Netcraft, LevelBlue) and two marking it suspicious (Gridinsoft, alphaMountain.ai). Google Safe Browsing checked the domain on the same day and did not flag it. urlscan.io scanned the site on 2026-10-22 and returned a malicious verdict with a score of 100, categorising it as phishing and labeling it a fake shop. OTX listed four pulses referencing the domain, and PhishDestroy's internal blocklist includes it; external blocklists and Spamhaus DBL reported no listing.

Infrastructure
The domain was registered through Dynadot Inc. on 2026-07-13. At the time of capture, the domain pointed to IP 195.96.131.11, which was listed under Malakmadze Web LLC in the United States. DNS records observed on 2026-10-22 listed Cloudflare nameservers aiden.ns.cloudflare.com and summer.ns.cloudflare.com, and the TLS certificate presented was issued by Let's Encrypt and was valid until 2026-12-10.

What to do
Visitors should avoid entering any personal, login, or payment details on the site and, if they have already done so, change associated passwords and monitor financial accounts. Organizations can add bombayshirtcompanyshop.shop to web filtering and intrusion‑detection rules and review any outbound traffic to the recorded IP while continuing to monitor threat‑intel feeds for updates.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1613f-987d-72ff-a5df-6da4d1993b70/
Cloudflare Radar report: https://radar.cloudflare.com/scan/e97987cb-4fdb-4bde-b830-581166c6161e
URLQuery report: https://urlquery.net/report/b75f411e-528b-463c-9755-0db8c55c8e5b
Stored capture screenshot: https://i.ibb.co/3ys4Ktjy/d0925d9c5f56.png
Cloudflare Radar screenshot (2026-10-22T01:38:02Z): https://screenshots.phishdestroy.io/cf/e97987cb-4fdb-4bde-b830-581166c6161e.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/b75f411e-528b-463c-9755-0db8c55c8e5b.png
URLScan screenshot (2026-10-22T01:38:48Z): https://screenshots.phishdestroy.io/us/01a16142-91de-715c-8b17-4634c580f0f9.png
URLScan capture report: https://urlscan.io/result/01a16142-91de-715c-8b17-4634c580f0f9/
VirusTotal report: https://www.virustotal.com/gui/domain/bombayshirtcompanyshop.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bombayshirtcompanyshop.shop
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 04:09:46 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/3ys4Ktjy/d0925d9c5f56.png
  Captured: 2026-10-22 01:36:34 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a1613f-987d-72ff-a5df-6da4d1993b70.png
  Captured: 2026-10-22 01:36:34 UTC
  Source report: https://urlscan.io/result/01a1613f-987d-72ff-a5df-6da4d1993b70/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e97987cb-4fdb-4bde-b830-581166c6161e.png
  Captured: 2026-10-22 01:38:02 UTC
  Source report: https://radar.cloudflare.com/scan/e97987cb-4fdb-4bde-b830-581166c6161e
  SHA-256: 7fe3a0cc4e04954b23204559501c19a222f47005caac7169d6b3c59de0be1e06
- URLQuery: https://screenshots.phishdestroy.io/uq/b75f411e-528b-463c-9755-0db8c55c8e5b.png
  Source report: https://urlquery.net/report/b75f411e-528b-463c-9755-0db8c55c8e5b
  SHA-256: c91ae1ff2c476ef80dc663f1be4030f6da8c513b8768062fa88e89a6d5565820
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16142-91de-715c-8b17-4634c580f0f9.png
  Captured: 2026-10-22 01:38:48 UTC
  Source report: https://urlscan.io/result/01a16142-91de-715c-8b17-4634c580f0f9/
  SHA-256: d74e51c3c299a87e95f42a59167032919f49e067f54f626432e1660eefed73bf

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T01:38:33Z",
        "uuid": "01a1613f-987d-72ff-a5df-6da4d1993b70",
        "scanned_at": "2026-10-22T01:35:32Z",
        "final_url": "https://bombayshirtcompanyshop.shop/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://bombayshirtcompanyshop.shop/",
                "from": "http://bombayshirtcompanyshop.shop/",
                "status": 307
            }
        ],
        "ip": "195.96.131.11",
        "domains": [
            "cdn.shopify.com",
            "placehold.co",
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "104.21.47.11",
            "142.251.179.94",
            "172.253.122.95",
            "23.227.39.200",
            "195.96.131.11"
        ],
        "asns": [
            "13335",
            "15169",
            "199242"
        ],
        "countries": [
            "US",
            "CA"
        ],
        "doc_hash": "9c18cc4a758fd4dfb5eee7be519583cda05a6126ad4cf25e1c2d2ceb05f00116",
        "script_hashes": [
            "70443360dddc48189b48954e7bf1f1fb2184bac45f30a4d03a87188f230ed0fc",
            "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f",
            "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe",
            "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5",
            "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0",
            "9de785ee19ccdf688f837e8bf8d2bbdb4c1dabc04b8ee7166bc1f4057226e49d",
            "91eb4c6e12d5d0f37080b53c6a8b513c579db4854839928eb478164ef6dc1d65",
            "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e",
            "54674023c15e7c7d2c117eacd9399f7e7ff4a224093be6fbd07fba4480b882ba",
            "ef598e4df04d2d336c9267057130a0ab7a499d928810f0bceb6393f28a5fcb03"
        ],
        "globals": [
            "__next_f",
            "webpackChunk_N_E",
            "next",
            "_N_E_STYLE_LOAD",
            "Prism"
        ],
        "cookies": [
            "_2pt_cid",
            "_2pt_rg",
            "_2pt_rid",
            "_site_domain"
        ],
        "storage_keys": [
            "analytics_session_id",
            "analytics_session_id_ts",
            "__analytics_utm__",
            "analytics_visitor_id"
        ],
        "tls": {
            "san": [
                "bombayshirtcompanyshop.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "bombayshirtcompanyshop.shop",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-10T17:31:42Z",
            "valid_from": "2026-09-11T17:31:43Z"
        },
        "domain_age_days": 100,
        "apex_age_days": 100,
        "tls_age_days": 40,
        "tls_valid_days": 89,
        "requests": 59,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 95,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "fakeshop"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Fake Shop"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T01:38:35Z",
        "uuid": "e97987cb-4fdb-4bde-b830-581166c6161e",
        "scanned_at": "2026-10-22T01:38:02Z",
        "final_url": "https://bombayshirtcompanyshop.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://bombayshirtcompanyshop.shop/",
                "status": 200
            }
        ],
        "dom_hash": "a5c5a635e86ce18ff8de40e5792d7a3d9c3544ac8a4bb3fcc260e9941e0cdd91",
        "doc_hash": "1accd12274cf7d97bca704b5aee2a212027aacbc8ab5d3e5fb8a1b76a2030af5",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "bombayshirtcompanyshop.shop",
                "type": "A",
                "value": "195.96.131.11"
            }
        ],
        "dnssec_valid": false,
        "ip": "195.96.131.11"
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T04:09:25Z",
        "analysis_at": "2026-10-22T02:18:39Z",
        "stats": {
            "timeout": 0,
            "harmless": 51,
            "malicious": 4,
            "suspicious": 2,
            "undetected": 35
        },
        "detections": {
            "CRDF": "malicious",
            "G-Data": "malware",
            "Netcraft": "malicious",
            "LevelBlue": "phishing",
            "Gridinsoft": "suspicious",
            "alphaMountain.ai": "suspicious"
        },
        "reputation": 0,
        "first_seen": "2026-07-13T19:15:10Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "aiden.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "195.96.131.11"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "aiden.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "summer.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-22T02:23:54Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "bombayshirtcompanyshop.shop"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "6108bc221dbd546f9d172fb22fffd26339",
            "sha256": "7d26b5de10f14f904e9311ea03f9d26acd1a8953474157a49ee861fefa021ce8",
            "subject": "bombayshirtcompanyshop.shop",
            "valid_to": "2026-12-10T17:31:42Z",
            "valid_from": "2026-09-11T17:31:43Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T01:38:53Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "bombayshirtcompanyshop.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-22T01:38:33Z",
            "first": "2026-10-22T01:38:33Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 58270
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443,
                8000
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.34.9",
                    "host": "summer.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.59.55",
                    "host": "aiden.ns.cloudflare.com"
                }
            ],
            "zone": "bombayshirtcompanyshop.shop"
        },
        "location": {
            "ip": "195.96.131.11",
            "asn": "199242",
            "org": "Malakmadze Web LLC",
            "city": "Los Angeles",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "bombayshirtcompanyshop.shop"
        },
        "dns": {
            "A": [
                "195.96.131.11"
            ],
            "NS": [
                "summer.ns.cloudflare.com",
                "aiden.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"aiden.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414734951, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "get_ip": {
            "ip": "195.96.131.11",
            "family": 4
        }
    }
}
```