# PhishDestroy domain threat record: bondandmasonapparel.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/bondandmasonapparel.shop/ Machine-readable companion: https://phishdestroy.io/domain/bondandmasonapparel.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 01:44:48 UTC - Last availability or vendor check: 2026-10-22 10:49:42 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 7/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.244.119.61 - Registrar in stored WHOIS data: Spaceship, Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-03-20 23:00:00 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16146-e270-7459-9e8f-af3c931cddf4/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bondandmasonapparel.shop - Certificate Transparency search: https://crt.sh/?q=%25.bondandmasonapparel.shop - Web Archive lookup: https://web.archive.org/web/*/https://bondandmasonapparel.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added bondandmasonapparel.shop to its internal blocklist because VirusTotal flagged the domain with several malicious and suspicious detections. The recorded page title reads "Bond & Mason | Bond & Mason" and the site returned HTTP 200 on the fetch performed on 2026-10-22. The domain was first seen by PhishDestroy on 2026-10-22, 215 days after its registration on 2026-03-21. How the scam works The detections suggest the site is being used for a phishing‑type operation, where an attacker presents a fake e‑commerce storefront to lure visitors into entering login credentials, payment details, or other personal information. No specific credential‑harvesting form or payment flow was observed on the captured page, so the exact method remains unconfirmed. Evidence VirusTotal reported 7 detections from 92 engines on 2026-10-11, including 4 malicious (alphaMountain.ai, G‑Data, Netcraft, Webroot) and 3 suspicious vendors. Google Safe Browsing checked on 2026-10-22 did not flag the domain. urlscan’s analysis on 2026-10-22 gave a malicious verdict with a score of 100, categorising the site as phishing and labeling it a fake shop. OTX listed 4 pulses referencing the domain on the same day. PhishDestroy’s internal blocklist marks the domain as true, while external blocklists returned zero matches. Infrastructure The domain was registered on 2026-03-21 and is hosted at IP 188.244.119.61, belonging to Malakmadze Web LLC in Georgia. DNS is served by Cloudflare nameservers amos.ns.cloudflare.com and millie.ns.cloudflare.com. A Let's Encrypt certificate was observed, issued on 2026-07-20 and expiring on 2026-10-18. The site uses Node.js, React and Next.js technologies. What to do Visitors should avoid providing any personal, login or payment information on this site and, if such data was entered, change associated passwords immediately. Security teams should block bondandmasonapparel.shop at the firewall or proxy level, monitor outbound connections to 188.244.119.61, and review logs for any access attempts. No wallet‑related remediation is required as no wallet activity was detected. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16146-e270-7459-9e8f-af3c931cddf4/ Cloudflare Radar report: https://radar.cloudflare.com/scan/55da8803-d46d-4d60-a2ad-c795e212ff99 URLQuery report: https://urlquery.net/report/5656a422-d9bb-4b82-b695-fd63bba9e7fd Stored capture screenshot: https://i.ibb.co/9kgkSQ7Q/96c4da2d109a.png Cloudflare Radar screenshot (2026-10-22T01:45:21Z): https://screenshots.phishdestroy.io/cf/55da8803-d46d-4d60-a2ad-c795e212ff99.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/5656a422-d9bb-4b82-b695-fd63bba9e7fd.png URLScan screenshot (2026-10-22T01:45:46Z): https://screenshots.phishdestroy.io/us/01a16149-08b1-72e8-8ef9-3b8eeefaea96.png URLScan capture report: https://urlscan.io/result/01a16149-08b1-72e8-8ef9-3b8eeefaea96/ VirusTotal report: https://www.virustotal.com/gui/domain/bondandmasonapparel.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bondandmasonapparel.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 02:18:32 UTC ## Stored page captures - Primary capture: https://i.ibb.co/9kgkSQ7Q/96c4da2d109a.png Captured: 2026-10-22 01:44:48 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16146-e270-7459-9e8f-af3c931cddf4.png Captured: 2026-10-22 01:44:48 UTC Source report: https://urlscan.io/result/01a16146-e270-7459-9e8f-af3c931cddf4/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/55da8803-d46d-4d60-a2ad-c795e212ff99.png Captured: 2026-10-22 01:45:21 UTC Source report: https://radar.cloudflare.com/scan/55da8803-d46d-4d60-a2ad-c795e212ff99 SHA-256: c36253a4b999df2be64b2ea9cd1ef46dbf65876acebc54fde13997ce4ba8ed5c - URLQuery: https://screenshots.phishdestroy.io/uq/5656a422-d9bb-4b82-b695-fd63bba9e7fd.png Source report: https://urlquery.net/report/5656a422-d9bb-4b82-b695-fd63bba9e7fd SHA-256: 8c9edb32d1b2fdd1483ad3f276e299d3613e750c815455f268e5396050e26d26 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16149-08b1-72e8-8ef9-3b8eeefaea96.png Captured: 2026-10-22 01:45:46 UTC Source report: https://urlscan.io/result/01a16149-08b1-72e8-8ef9-3b8eeefaea96/ SHA-256: 35790c9d5c5da6090881177b8219e688f8c422073df7a00087723d45d8d9484b ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T01:45:39Z", "uuid": "01a16146-e270-7459-9e8f-af3c931cddf4", "scanned_at": "2026-10-22T01:43:25Z", "final_url": "https://bondandmasonapparel.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bondandmasonapparel.shop/", "from": "http://bondandmasonapparel.shop/", "status": 307 } ], "ip": "188.244.119.61", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.250.190.227", "142.251.163.95", "188.244.119.61" ], "asns": [ "15169", "199242" ], "countries": [ "US", "GE" ], "doc_hash": "4135ca0eb813869a4ee3df8c9b32ef7f76003bb91e545b4c64ffaabd57f43e28", "script_hashes": [ "21bd8330e680d74e794ed909f85be2bc7cba52632988b835f36408ddb6b360e8", "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f", "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe", "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5", "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0", "9de785ee19ccdf688f837e8bf8d2bbdb4c1dabc04b8ee7166bc1f4057226e49d", "b9adf20c93dc3a7aa37cdb5f5b6d86d4252964d97a6cf3fd5ce6f143da225d82", "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e", "cac7c96146dad0bbe55d718c23f7af31cca28565413d9915c256932a69ae83df", "ef598e4df04d2d336c9267057130a0ab7a499d928810f0bceb6393f28a5fcb03" ], "globals": [ "__next_f", "$RC", "webpackChunk_N_E", "next", "_N_E_STYLE_LOAD", "Prism" ], "cookies": [ "_9za_cid", "_9za_rg", "_9za_rid", "_site_domain" ], "storage_keys": [ "analytics_session_id", "analytics_session_id_ts", "__analytics_utm__", "analytics_visitor_id" ], "tls": { "san": [ "bondandmasonapparel.shop" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "bondandmasonapparel.shop", "protocol": "TLS 1.3", "valid_to": "2026-12-17T16:19:25Z", "valid_from": "2026-09-18T16:19:26Z" }, "domain_age_days": 214, "apex_age_days": 214, "tls_age_days": 33, "tls_valid_days": 89, "requests": 56, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 94, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "content-type": "text/html; charset=utf-8", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T01:45:45Z", "uuid": "55da8803-d46d-4d60-a2ad-c795e212ff99", "scanned_at": "2026-10-22T01:45:21Z", "final_url": "https://bondandmasonapparel.shop/", "status": 200, "history": [ { "url": "https://bondandmasonapparel.shop/", "status": 200 } ], "dom_hash": "fe74d887be31828dc12c968574cec6c214fde803e8d84aae4738473fc907a158", "doc_hash": "f77c932f2f6d357d86065432bc6705d774533026d32ff729e1d1149094fd2bcd", "domain_risks": [ "Ecommerce", "Shopping & Auctions", "Fashion", "Society & Lifestyle", "Clothing" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bondandmasonapparel.shop", "type": "A", "value": "188.244.119.61" } ], "dnssec_valid": false, "ip": "188.244.119.61" }, "vt": { "v": 1, "fetched_at": "2026-10-22T02:16:17Z", "analysis_at": "2026-10-11T17:27:00Z", "stats": { "timeout": 0, "harmless": 52, "malicious": 4, "suspicious": 3, "undetected": 33 }, "detections": { "ESET": "suspicious", "G-Data": "malware", "Webroot": "malicious", "Netcraft": "malicious", "LevelBlue": "suspicious", "Gridinsoft": "suspicious", "alphaMountain.ai": "phishing" }, "reputation": 0, "categories": { "Webroot": "Phishing and Other Frauds", "alphaMountain.ai": "Phishing (alphaMountain.ai)", "Forcepoint ThreatSeeker": "shopping" }, "created": "2026-03-21T00:00:00Z", "updated": "2026-03-21T00:00:00Z", "first_seen": "2026-03-21T13:54:14Z", "dns": [ { "ttl": 300, "type": "A", "value": "188.244.119.61" }, { "ttl": 21600, "type": "NS", "value": "millie.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "amos.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "amos.ns.cloudflare.com" } ], "dns_at": "2026-10-11T17:27:16Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "bondandmasonapparel.shop" ], "issuer": "Let's Encrypt / YE2", "serial": "5ae33034ec39cd18984d86f28b7307bc951", "sha256": "6d052155d1d6f33897277a18607986ca6fb55ca370521d8e857a327dfaef987d", "subject": "bondandmasonapparel.shop", "valid_to": "2026-10-18T17:04:21Z", "valid_from": "2026-07-20T17:04:22Z" }, "whois": [] }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T01:45:59Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bondandmasonapparel.shop" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "robots_txt": { "present": true, "sitemaps": [ "https://bondandmasonapparel.shop/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 330 }, "social_tags": { "title": "Bond & Mason | Bond & Mason", "ogImage": "https://bondandmasonapparel.shop/opengraph-image.jpg", "ogTitle": "Bond & Mason", "description": "Your One Stop Shop For Beautiful Bags. Free Shipping On All orders. 30 Day Money Back Guarantee, 24/7 Customer Support & Hassle-Free Returns.", "twitterCard": "summary_large_image", "ogDescription": "Your One Stop Shop For Beautiful Bags. Free Shipping On All orders. 30 Day Money Back Guarantee, 24/7 Customer Support & Hassle-Free Returns." }, "trackers": { "requests": 42, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 16, "tls": 212, "wait": 199, "connect": 169, "download": 662 }, "response_ms": 1258 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 296184, "co2_grams": 0.0108, "cleaner_than": 1 }, "dns_server": { "ns": [ { "ip": "108.162.195.120", "host": "amos.ns.cloudflare.com" }, { "ip": "108.162.194.181", "host": "millie.ns.cloudflare.com" } ], "zone": "bondandmasonapparel.shop" }, "cookies": { "cookies": [ { "name": "_9za_cid" }, { "name": "_9za_rg" }, { "name": "_9za_rid" }, { "name": "_site_domain" } ] }, "location": { "ip": "188.244.119.61", "asn": "199242", "org": "Malakmadze Web LLC", "country": "GE" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "bondandmasonapparel.shop" }, "dns": { "A": [ "188.244.119.61" ], "NS": [ "amos.ns.cloudflare.com", "millie.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"amos.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416180042, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": "1; mode=block", "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "188.244.119.61", "family": 4 }, "redirects": { "chain": [ "https://bondandmasonapparel.shop" ] }, "subdomains": { "count": 1, "subdomains": [ "img.bondandmasonapparel.shop" ] }, "tech_stack": { "technologies": [ "Node.js", "Headless UI", "React", "Next.js", "Priority Hints", "Google Font API", "Webpack", "Prism", "Open Graph", "Module Federation", "HTTP/3" ] }, "linked_pages": { "internal_count": 27 }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } } } } ```