# PhishDestroy domain threat record: bombshestudio.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/bombshestudio.shop/ Machine-readable companion: https://phishdestroy.io/domain/bombshestudio.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 01:51:12 UTC - Last availability or vendor check: 2026-10-22 22:51:34 UTC - Stored record updated: 2026-10-22 22:51:34 UTC - VirusTotal detections in the stored snapshot: 5/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 46.245.239.117 - Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND - Last stored HTTP status: 200 ## Evidence links - URLScan report: https://urlscan.io/result/01a1614d-4301-761a-a734-da392daab28f/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bombshestudio.shop - Certificate Transparency search: https://crt.sh/?q=%25.bombshestudio.shop - Web Archive lookup: https://web.archive.org/web/*/https://bombshestudio.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed bombshestudio.shop as a suspicious domain. The recorded page title was “Producent ekskluzywnej odzieży, minimalistyczna marka ubraniowa | Bluzki”, indicating a clothing retailer claim. PhishDestroy first observed the domain on 2026-10-22. An HTTP 307 redirect to HTTPS was recorded, and the final response returned HTTP 200 on the same date. How the scam works The listing is based on indicators that the site may be used for phishing, a technique where attackers host pages that mimic legitimate services to capture credentials or personal data. No specific credential‑stealing form or other malicious behavior was observed in the captured page, so the exact method remains unconfirmed. Evidence VirusTotal scanned the domain on 2026-10-11 (retrieved 2026-10-22) and reported five detections from 92 engines, with two vendors (CRDF and Webroot) marking it malicious and three (LevelBlue, Gridinsoft, alphaMountain.ai) marking it suspicious. Google Safe Browsing checked on 2026-10-22 and did not flag the site. urlscan.io captured the site on 2026-10-22 and returned a malicious verdict with a score of 100, categorizing it as phishing and labeling it a “Fake Shop”. OTX listed zero pulses as of 2026-10-22. PhishDestroy’s internal blocklist contains the domain, while external blocklists checked on 2026-10-22 reported no entries. Infrastructure The domain was registered through Dynadot Inc. on 2026-05-21. The DNS record at the time of observation pointed to 46.245.239.117, which was associated with Malakmadze Web LLC in Georgia. Cloudflare nameservers (chelsea.ns.cloudflare.com and west.ns.cloudflare.com) were listed, and the site presented a Let’s Encrypt TLS certificate valid from 2026-09-18 to 2026-12-17. What to do Visitors should avoid entering any credentials or personal information on the site; if they have already done so, they should change affected passwords and monitor accounts for suspicious activity. Organizations can block bombshestudio.shop at the DNS or proxy level and review logs for connections to 46.245.239.117. Continue monitoring reputable threat feeds for any updates to the domain’s status. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1614d-4301-761a-a734-da392daab28f/ Cloudflare Radar report: https://radar.cloudflare.com/scan/ed6e18ee-83d9-4d66-a845-923b30629a86 Stored capture screenshot: https://i.ibb.co/h1nH4DqM/1ec56ba284d5.png Cloudflare Radar screenshot (2026-10-22T01:51:37Z): https://screenshots.phishdestroy.io/cf/ed6e18ee-83d9-4d66-a845-923b30629a86.png URLScan screenshot (2026-10-22T01:40:37Z): https://screenshots.phishdestroy.io/us/01a16144-1c8e-724f-b06f-fb77ccb8a7e2.png URLScan capture report: https://urlscan.io/result/01a16144-1c8e-724f-b06f-fb77ccb8a7e2/ URLScan screenshot (2026-10-22T01:42:56Z): https://screenshots.phishdestroy.io/us/01a16146-7150-70e8-9518-6c634e025504.png URLScan capture report: https://urlscan.io/result/01a16146-7150-70e8-9518-6c634e025504/ URLScan screenshot (2026-10-22T01:45:26Z): https://screenshots.phishdestroy.io/us/01a16148-be90-7524-811b-483561940d7f.png URLScan capture report: https://urlscan.io/result/01a16148-be90-7524-811b-483561940d7f/ VirusTotal report: https://www.virustotal.com/gui/domain/bombshestudio.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bombshestudio.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 01:52:44 UTC ## Stored page captures - Primary capture: https://i.ibb.co/h1nH4DqM/1ec56ba284d5.png Captured: 2026-10-22 01:51:12 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a1614d-4301-761a-a734-da392daab28f.png Captured: 2026-10-22 01:51:12 UTC Source report: https://urlscan.io/result/01a1614d-4301-761a-a734-da392daab28f/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/ed6e18ee-83d9-4d66-a845-923b30629a86.png Captured: 2026-10-22 01:51:37 UTC Source report: https://radar.cloudflare.com/scan/ed6e18ee-83d9-4d66-a845-923b30629a86 SHA-256: 75a00aa8070d4f2d4bbc6f07b08d81f583d8c035e309bb4d8888a2f088f6f9cc - URLQuery: https://screenshots.phishdestroy.io/uq/491a336e-86cf-46ba-a8df-a41c33bd313d.png Source report: https://urlquery.net/report/491a336e-86cf-46ba-a8df-a41c33bd313d SHA-256: 9601d9259d529d071dc02140f3e27c7b6d043a99000adce1c530c4827e36f29e - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16144-1c8e-724f-b06f-fb77ccb8a7e2.png Captured: 2026-10-22 01:40:37 UTC Source report: https://urlscan.io/result/01a16144-1c8e-724f-b06f-fb77ccb8a7e2/ SHA-256: 883ea561a519f64038d895ec28c88fcb005f3d0bbaaa9a1673310ddb57a0281e - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16146-7150-70e8-9518-6c634e025504.png Captured: 2026-10-22 01:42:56 UTC Source report: https://urlscan.io/result/01a16146-7150-70e8-9518-6c634e025504/ SHA-256: 883ea561a519f64038d895ec28c88fcb005f3d0bbaaa9a1673310ddb57a0281e - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16148-be90-7524-811b-483561940d7f.png Captured: 2026-10-22 01:45:26 UTC Source report: https://urlscan.io/result/01a16148-be90-7524-811b-483561940d7f/ SHA-256: 883ea561a519f64038d895ec28c88fcb005f3d0bbaaa9a1673310ddb57a0281e ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T01:51:54Z", "uuid": "01a1614d-4301-761a-a734-da392daab28f", "scanned_at": "2026-10-22T01:50:22Z", "final_url": "https://bombshestudio.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bombshestudio.shop/", "from": "http://bombshestudio.shop/", "status": 307 } ], "ip": "46.245.239.117", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.251.20.94", "192.178.183.95", "46.245.239.117" ], "asns": [ "15169", "199242" ], "countries": [ "US", "GE" ], "doc_hash": "84e89c9233c074a390949a4dbdd08a151e9d7050b99587595af200aab0d16123", "script_hashes": [ "7302d96ee0c7d033dff721d1d98ecc615fb2f9936d2589d9c82e0acdf3815d50", "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f", "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe", "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5", "91eb4c6e12d5d0f37080b53c6a8b513c579db4854839928eb478164ef6dc1d65", "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e", "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0", "54674023c15e7c7d2c117eacd9399f7e7ff4a224093be6fbd07fba4480b882ba", "ef598e4df04d2d336c9267057130a0ab7a499d928810f0bceb6393f28a5fcb03", "915eca2ddd30cf0f0dcf655424d66e36e55d66a038b3365bfff815980b355c29" ], "globals": [ "__next_f", "webpackChunk_N_E", "next", "_N_E_STYLE_LOAD", "Prism" ], "cookies": [ "_ucm_cid", "_ucm_rg", "_ucm_rid", "_site_domain" ], "storage_keys": [ "analytics_session_id", "analytics_session_id_ts", "__analytics_utm__", "analytics_visitor_id" ], "tls": { "san": [ "bombshestudio.shop" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "bombshestudio.shop", "protocol": "TLS 1.3", "valid_to": "2026-12-17T04:32:20Z", "valid_from": "2026-09-18T04:32:21Z" }, "domain_age_days": 153, "apex_age_days": 153, "tls_age_days": 33, "tls_valid_days": 89, "requests": 50, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 96, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "content-type": "text/html; charset=utf-8", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T01:52:04Z", "uuid": "ed6e18ee-83d9-4d66-a845-923b30629a86", "scanned_at": "2026-10-22T01:51:37Z", "final_url": "https://bombshestudio.shop/", "status": 200, "history": [ { "url": "https://bombshestudio.shop/", "status": 200 } ], "dom_hash": "636f9eb1adebf5478b54f1f82b3b2828c89fa4a52949ea6e2e5c503954009e0f", "doc_hash": "e3c10bafee75b9a5e2976df723873d276aa3641ee6a1b3f01d59492a1e8a0a6f", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bombshestudio.shop", "type": "A", "value": "46.245.239.117" } ], "dnssec_valid": false, "ip": "46.245.239.117" }, "vt": { "v": 1, "fetched_at": "2026-10-22T01:51:32Z", "analysis_at": "2026-10-11T16:21:02Z", "stats": { "timeout": 0, "harmless": 51, "malicious": 2, "suspicious": 3, "undetected": 36 }, "detections": { "CRDF": "malicious", "Webroot": "malicious", "LevelBlue": "suspicious", "Gridinsoft": "suspicious", "alphaMountain.ai": "spam" }, "reputation": 0, "categories": { "Google": "retail", "Webroot": "Phishing and Other Frauds", "alphaMountain.ai": "Spam, Suspicious (alphaMountain.ai)" }, "first_seen": "2026-05-21T21:07:32Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "chelsea.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "chelsea.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "46.245.239.117" }, { "ttl": 21600, "type": "NS", "value": "west.ns.cloudflare.com" } ], "dns_at": "2026-10-11T16:25:34Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "bombshestudio.shop" ], "issuer": "Let's Encrypt / YE2", "serial": "561f3f5619609521451dd2f4267effcdcf", "sha256": "80979e22143dff7ca804591337743eb20b2225f9c9976e8d42605f589d9e0d75", "subject": "bombshestudio.shop", "valid_to": "2026-12-17T04:32:20Z", "valid_from": "2026-09-18T04:32:21Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T01:52:20Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bombshestudio.shop" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443, 8000 ] }, "dns_server": { "ns": [ { "ip": "162.159.38.177", "host": "chelsea.ns.cloudflare.com" }, { "ip": "173.245.59.247", "host": "west.ns.cloudflare.com" } ], "zone": "bombshestudio.shop" }, "location": { "ip": "46.245.239.117", "asn": "199242", "org": "Malakmadze Web LLC", "country": "GE" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "bombshestudio.shop" }, "dns": { "A": [ "46.245.239.117" ], "NS": [ "chelsea.ns.cloudflare.com", "west.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"chelsea.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415082221, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "46.245.239.117", "family": 4 } } } ```