# PhishDestroy domain threat record: bonafidelife.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/bonafidelife.shop/ Machine-readable companion: https://phishdestroy.io/domain/bonafidelife.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 01:42:36 UTC - Last availability or vendor check: 2026-10-22 01:42:36 UTC - Stored record updated: 2026-10-22 04:10:22 UTC - VirusTotal detections in the stored snapshot: 9/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 37.72.142.130 - Registrar in stored WHOIS data: Dynadot Inc. - Registration date in stored WHOIS data: 2026-04-16 22:00:00 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16145-6345-77d8-ac0f-ffeee5e5746c/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bonafidelife.shop - Certificate Transparency search: https://crt.sh/?q=%25.bonafidelife.shop - Web Archive lookup: https://web.archive.org/web/*/https://bonafidelife.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://i.ibb.co/jYtcd0T/edfd0863d80d.png Captured: 2026-10-22 01:42:36 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16145-6345-77d8-ac0f-ffeee5e5746c.png Captured: 2026-10-22 01:42:36 UTC Source report: https://urlscan.io/result/01a16145-6345-77d8-ac0f-ffeee5e5746c/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/f6ce8dc8-08cb-417d-817f-0efbeafe8f19.png Captured: 2026-10-22 01:43:21 UTC Source report: https://radar.cloudflare.com/scan/f6ce8dc8-08cb-417d-817f-0efbeafe8f19 SHA-256: 6d88edb64a11b212eec1b4aed0e1e91667f3882b3556b3d04c405666381d7135 - URLQuery: https://screenshots.phishdestroy.io/uq/55c2ff42-78c3-47b0-b108-4819a67cf19c.png Source report: https://urlquery.net/report/55c2ff42-78c3-47b0-b108-4819a67cf19c SHA-256: cdf97fe107f063dad93c350ce31473d28bcdda24f90e42968e969e0b11f74bd2 - URLScan ยท 2026-10-22: https://screenshots.phishdestroy.io/us/01a16149-4923-757d-a156-afb3f1a5d8aa.png Captured: 2026-10-22 01:46:02 UTC Source report: https://urlscan.io/result/01a16149-4923-757d-a156-afb3f1a5d8aa/ SHA-256: c2ebcf0f618d9f7cad2d0f9c8073d2867243ba1d25019ee246a4ae8490aea8b0 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T01:43:39Z", "uuid": "01a16145-6345-77d8-ac0f-ffeee5e5746c", "scanned_at": "2026-10-22T01:41:47Z", "final_url": "https://bonafidelife.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bonafidelife.shop/", "from": "http://bonafidelife.shop/", "status": 307 } ], "ip": "37.72.142.130", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "192.178.183.94", "142.251.127.95", "37.72.142.130" ], "asns": [ "15169", "199242" ], "countries": [ "US", "GE" ], "doc_hash": "ca40912341f71e96ea2a6d84b995108c374f5ba702f797ca33a8bf1238aba26e", "script_hashes": [ "66d8281fc1221b76be9090128cd41c8da92adeb9b43a15c8f16dc22ae21b5f99", "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f", "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe", "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5", "b9adf20c93dc3a7aa37cdb5f5b6d86d4252964d97a6cf3fd5ce6f143da225d82", "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e", "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0", "cac7c96146dad0bbe55d718c23f7af31cca28565413d9915c256932a69ae83df", "ef598e4df04d2d336c9267057130a0ab7a499d928810f0bceb6393f28a5fcb03", "915eca2ddd30cf0f0dcf655424d66e36e55d66a038b3365bfff815980b355c29" ], "globals": [ "__next_f", "webpackChunk_N_E", "next", "_N_E_STYLE_LOAD", "Prism" ], "cookies": [ "_xue_cid", "_xue_rg", "_xue_rid", "_site_domain" ], "storage_keys": [ "analytics_session_id", "analytics_session_id_ts", "__analytics_utm__", "analytics_visitor_id" ], "tls": { "san": [ "bonafidelife.shop" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "bonafidelife.shop", "protocol": "TLS 1.3", "valid_to": "2027-01-11T12:31:03Z", "valid_from": "2026-10-13T12:31:04Z" }, "domain_age_days": 187, "apex_age_days": 187, "tls_age_days": 8, "tls_valid_days": 89, "requests": 56, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 88, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "content-type": "text/html; charset=utf-8", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T01:43:44Z", "uuid": "f6ce8dc8-08cb-417d-817f-0efbeafe8f19", "scanned_at": "2026-10-22T01:43:21Z", "final_url": "https://bonafidelife.shop/", "status": 200, "history": [ { "url": "https://bonafidelife.shop/", "status": 200 } ], "dom_hash": "96968e66899f604a7cf92b8bd28bfa9c09a19d1f11a2677bfe1245d81ba5f1bb", "doc_hash": "9703081cfb2334fa3ac05b7ad604456c256e6865085dc7764589d940542855cb", "domain_risks": [ "Ecommerce", "Shopping & Auctions", "Health & Fitness", "Health" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bonafidelife.shop", "type": "A", "value": "37.72.142.130" } ], "dnssec_valid": false, "ip": "37.72.142.130" }, "vt": { "v": 1, "fetched_at": "2026-10-22T03:48:07Z", "analysis_at": "2026-10-22T02:18:40Z", "stats": { "timeout": 0, "harmless": 48, "malicious": 5, "suspicious": 4, "undetected": 35 }, "detections": { "ESET": "suspicious", "G-Data": "phishing", "CyRadar": "suspicious", "Webroot": "malicious", "Netcraft": "malicious", "LevelBlue": "phishing", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "suspicious" }, "reputation": 0, "created": "2026-04-17T00:00:00Z", "updated": "2026-04-17T00:00:00Z", "first_seen": "2026-04-17T12:37:22Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "millie.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "37.72.142.130" }, { "ttl": 21600, "type": "NS", "value": "amos.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "amos.ns.cloudflare.com" } ], "dns_at": "2026-10-22T02:23:57Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "bonafidelife.shop" ], "issuer": "Let's Encrypt / YE1", "serial": "5db559becf804255db8bf14662777d83bc4", "sha256": "37a9ab3f32c6d0402497e7d3206651f9ec14128fa2b533158dc67cb1a0b51120", "subject": "bonafidelife.shop", "valid_to": "2027-01-11T12:31:03Z", "valid_from": "2026-10-13T12:31:04Z" }, "whois": [] }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T01:44:00Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bonafidelife.shop" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443, 8000 ] }, "dns_server": { "ns": [ { "ip": "162.159.38.181", "host": "millie.ns.cloudflare.com" }, { "ip": "162.159.44.120", "host": "amos.ns.cloudflare.com" } ], "zone": "bonafidelife.shop" }, "location": { "ip": "37.72.142.130", "asn": "199242", "org": "Malakmadze Web LLC", "country": "GE" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "bonafidelife.shop" }, "dns": { "A": [ "37.72.142.130" ], "NS": [ "millie.ns.cloudflare.com", "amos.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"amos.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417212138, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "37.72.142.130", "family": 4 } } } ```