# PhishDestroy domain threat record: bombstore.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/bombstore.shop/
Machine-readable companion: https://phishdestroy.io/domain/bombstore.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 01:42:32 UTC
- Last availability or vendor check: 2026-10-22 10:49:41 UTC
- Stored record updated: 2026-10-22 14:29:27 UTC
- VirusTotal detections in the stored snapshot: 6/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 162.222.90.62
- Registrar in stored WHOIS data: Dynadot Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-04-16 22:00:00 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16145-6401-72fa-b0f1-cf24044deaa6/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/bombstore.shop
- Certificate Transparency search: https://crt.sh/?q=%25.bombstore.shop
- Web Archive lookup: https://web.archive.org/web/*/https://bombstore.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added bombstore.shop to its internal blocklist after the domain was first observed on 2026-10-22. The recorded page title reads “DA‑BOMB | Specialists in Bath Bombs & Whipped Soap | DA‑BOMB”. An HTTP 307 redirect forces HTTPS, and the final response returned a 200 status code on the same day.

How the scam works
The detections label the site as a phishing or fake‑shop page that could attempt to lure visitors into providing personal or payment details. No specific credential‑stealing form or malicious payload was captured in the snapshot, so the exact technique remains unconfirmed beyond the generic phishing risk.

Evidence
VirusTotal (2026-10-22) reported 6 detections: 4 malicious (CRDF, G‑Data, Netcraft, LevelBlue) and 2 suspicious (Gridinsoft, alphaMountain.ai) out of 92 engines. Google Safe Browsing (2026-10-22) did not flag the domain. urlscan.io (2026-10-22) gave a malicious verdict with a score of 100, categorising it as phishing and labeling it a fake shop. OTX listed 4 pulses referencing the domain. No external blocklists reported the domain, but PhishDestroy’s internal list marks it as blocked.

Infrastructure
The domain was registered with Dynadot Inc. on 2026-04-17. The recorded IP was 162.222.90.62 and the hosting organization was listed as Malakmadze Web LLC in Georgia. DNS is served by Cloudflare (lana.ns.cloudflare.com, bradley.ns.cloudflare.com). TLS uses a Let’s Encrypt certificate issued on 2026-10-13, valid until 2027-01-11. Open ports observed include 22, 80, 443 and 8000.

What to do
Visitors should avoid entering any personal, login or payment information on the site and, if they have already done so, change passwords on affected accounts and monitor for unauthorized activity. Defenders should block bombstore.shop at the network perimeter, log any connections to 162.222.90.62, and add the domain to local blocklists to prevent future access.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16145-6401-72fa-b0f1-cf24044deaa6/
Cloudflare Radar report: https://radar.cloudflare.com/scan/bf4bec43-f3f2-403b-b24a-bb97ed84fe3e
URLQuery report: https://urlquery.net/report/fe207222-a1bb-461e-b4f5-c01360b2554e
Stored capture screenshot: https://i.ibb.co/C5DXz6mH/50c47b61af94.png
Cloudflare Radar screenshot (2026-10-22T01:43:21Z): https://screenshots.phishdestroy.io/cf/bf4bec43-f3f2-403b-b24a-bb97ed84fe3e.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/fe207222-a1bb-461e-b4f5-c01360b2554e.png
URLScan screenshot (2026-10-22T01:45:20Z): https://screenshots.phishdestroy.io/us/01a16148-9fb8-76c4-b4cf-b5a458d0c0a7.png
URLScan capture report: https://urlscan.io/result/01a16148-9fb8-76c4-b4cf-b5a458d0c0a7/
VirusTotal report: https://www.virustotal.com/gui/domain/bombstore.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bombstore.shop
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 02:49:10 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/C5DXz6mH/50c47b61af94.png
  Captured: 2026-10-22 01:42:32 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a16145-6401-72fa-b0f1-cf24044deaa6.png
  Captured: 2026-10-22 01:42:32 UTC
  Source report: https://urlscan.io/result/01a16145-6401-72fa-b0f1-cf24044deaa6/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/bf4bec43-f3f2-403b-b24a-bb97ed84fe3e.png
  Captured: 2026-10-22 01:43:21 UTC
  Source report: https://radar.cloudflare.com/scan/bf4bec43-f3f2-403b-b24a-bb97ed84fe3e
  SHA-256: 7a864394e586a270db0714ad58a4792940cdaccb2ac2675d46ef873b69cf8376
- URLQuery: https://screenshots.phishdestroy.io/uq/fe207222-a1bb-461e-b4f5-c01360b2554e.png
  Source report: https://urlquery.net/report/fe207222-a1bb-461e-b4f5-c01360b2554e
  SHA-256: a6d875246296980be2dc0b0f48399d0d0ef4247a7e5b7e7ee22d953aa2eb4155
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16148-9fb8-76c4-b4cf-b5a458d0c0a7.png
  Captured: 2026-10-22 01:45:20 UTC
  Source report: https://urlscan.io/result/01a16148-9fb8-76c4-b4cf-b5a458d0c0a7/
  SHA-256: 9e0eda6830a0dca437523a5f21669c0175b0fc64cc2eb3746904d05c091d09ea

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T01:43:39Z",
        "uuid": "01a16145-6401-72fa-b0f1-cf24044deaa6",
        "scanned_at": "2026-10-22T01:41:46Z",
        "final_url": "https://bombstore.shop/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://bombstore.shop/",
                "from": "http://bombstore.shop/",
                "status": 307
            }
        ],
        "ip": "162.222.90.62",
        "domains": [
            "placehold.co",
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "188.114.96.3",
            "142.251.20.94",
            "2a00:1450:4001:c15::5f",
            "162.222.90.62"
        ],
        "asns": [
            "13335",
            "15169",
            "199242"
        ],
        "countries": [
            "US",
            "DE",
            "GE"
        ],
        "doc_hash": "041e20fdce259285336666e514630f8ace2dfa76d23324f8d4eb6cef6e84f242",
        "script_hashes": [
            "dbaf5f84a9a85c20a55c7bdcc2f36019b3e083d6ec67029cde72be85375ce13a",
            "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f",
            "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe",
            "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5",
            "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0",
            "9de785ee19ccdf688f837e8bf8d2bbdb4c1dabc04b8ee7166bc1f4057226e49d",
            "91eb4c6e12d5d0f37080b53c6a8b513c579db4854839928eb478164ef6dc1d65",
            "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e",
            "54674023c15e7c7d2c117eacd9399f7e7ff4a224093be6fbd07fba4480b882ba",
            "ef598e4df04d2d336c9267057130a0ab7a499d928810f0bceb6393f28a5fcb03"
        ],
        "globals": [
            "__next_f",
            "webpackChunk_N_E",
            "next",
            "_N_E_STYLE_LOAD",
            "Prism"
        ],
        "cookies": [
            "_pkh_cid",
            "_pkh_rg",
            "_pkh_rid",
            "_site_domain"
        ],
        "storage_keys": [
            "analytics_session_id",
            "analytics_session_id_ts",
            "__analytics_utm__",
            "analytics_visitor_id"
        ],
        "tls": {
            "san": [
                "bombstore.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "bombstore.shop",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-11T08:44:09Z",
            "valid_from": "2026-10-13T08:44:10Z"
        },
        "domain_age_days": 1121,
        "apex_age_days": 1121,
        "tls_age_days": 8,
        "tls_valid_days": 89,
        "requests": 53,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 86,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "fakeshop"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Fake Shop"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T01:43:46Z",
        "uuid": "bf4bec43-f3f2-403b-b24a-bb97ed84fe3e",
        "scanned_at": "2026-10-22T01:43:21Z",
        "final_url": "https://bombstore.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://bombstore.shop/",
                "status": 200
            }
        ],
        "dom_hash": "77cb9ef359b7af7e047e83b6ed6b0f64213c14990dc330de62f0218e95a28e62",
        "doc_hash": "5a42699568b4f8c81a98996bed73fa1ef99e56bfc74c1ad1a4a1143b37f28612",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "bombstore.shop",
                "type": "A",
                "value": "162.222.90.62"
            }
        ],
        "dnssec_valid": false,
        "ip": "162.222.90.62"
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T02:47:58Z",
        "analysis_at": "2026-10-22T02:18:39Z",
        "stats": {
            "timeout": 0,
            "harmless": 52,
            "malicious": 4,
            "suspicious": 2,
            "undetected": 34
        },
        "detections": {
            "CRDF": "malicious",
            "G-Data": "malware",
            "Netcraft": "malicious",
            "LevelBlue": "phishing",
            "Gridinsoft": "suspicious",
            "alphaMountain.ai": "suspicious"
        },
        "reputation": 0,
        "created": "2026-04-17T00:00:00Z",
        "updated": "2026-04-17T00:00:00Z",
        "first_seen": "2024-03-05T06:36:43Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "lana.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "162.222.90.62"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "bradley.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "bradley.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-22T02:23:55Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "bombstore.shop"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "5a3952b33b92a02011e994c77e69e70fec5",
            "sha256": "39e1347043f526c56ae52561dbb9c789b7e9d7adc2ae62c7be1809598c3f1d4b",
            "subject": "bombstore.shop",
            "valid_to": "2027-01-11T08:44:09Z",
            "valid_from": "2026-10-13T08:44:10Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T01:44:03Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "bombstore.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2024-10-03T18:51:20Z",
            "first": "2024-05-15T11:45:56Z",
            "changes": 1,
            "days_archived": 3,
            "scans_per_day": 0.01,
            "avg_page_bytes": 2533
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443,
                8000
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.35.35",
                    "host": "bradley.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.32.182",
                    "host": "lana.ns.cloudflare.com"
                }
            ],
            "zone": "bombstore.shop"
        },
        "location": {
            "ip": "162.222.90.62",
            "asn": "199242",
            "org": "Malakmadze Web LLC",
            "country": "GE"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "bombstore.shop"
        },
        "dns": {
            "A": [
                "162.222.90.62"
            ],
            "NS": [
                "lana.ns.cloudflare.com",
                "bradley.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"bradley.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417214953, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "get_ip": {
            "ip": "162.222.90.62",
            "family": 4
        }
    }
}
```