# PhishDestroy domain threat record: bonkersstyle.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/bonkersstyle.shop/
Machine-readable companion: https://phishdestroy.io/domain/bonkersstyle.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-24 22:47:18 UTC
- Last availability or vendor check: 2026-10-25 03:48:31 UTC
- Stored record updated: 2026-10-25 08:11:55 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 162.222.90.32
- Registrar in stored WHOIS data: Dynadot Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-04-24 22:00:00 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17018-0457-772b-a369-f2fa72897b1c/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/bonkersstyle.shop
- Certificate Transparency search: https://crt.sh/?q=%25.bonkersstyle.shop
- Web Archive lookup: https://web.archive.org/web/*/https://bonkersstyle.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added bonkersstyle.shop to its internal blocklist because it resides in the 162.222.90.0/24 network, which hosts 740 confirmed scams and no known legitimate sites. The site’s recorded page presents a “BONKERS” brand selling cat treats and streetwear, and it returned HTTP 200 on 2026-10-25 when first observed.

How the scam works
Fake online‑store pages often collect payment details, shipping addresses, or login credentials by mimicking legitimate e‑commerce sites. Visitors who enter such information may have it used for fraud or identity theft. Because the page claims to sell products, the primary risk is credential or payment‑data harvesting.

Evidence
VirusTotal scanned the domain on 2026-10-25 with 92 engines and reported zero detections. Google Safe Browsing checked on the same day and did not flag the site. OTX listed three pulses for the domain as of 2026-10-25, none of which indicate confirmed malicious activity. PhishDestroy’s internal list marked the domain as malicious on 2026-10-25. URLScan captured the site on 2026-10-25, assigning a malicious score of 100 and labeling it as a phishing “Fake Shop.”

Infrastructure
The domain was registered on 2026-04-25 and resolves to 162.222.90.32, hosted behind Cloudflare. The IP belongs to Malakmadze Web LLC (ASN 199242, Georgia). TLS uses a Let’s Encrypt certificate issued 2026-10-22, valid to 2027-01-20, with AES‑128‑GCM. Open ports observed were 22, 80, 443, and 8000; DNSSEC was not enabled.

What to do
Visitors should avoid submitting any personal, login, or payment information on the site; if they have already done so, they should change any associated passwords and monitor accounts for unauthorized activity. Defenders can add bonkersstyle.shop to blocklists, monitor traffic to the recorded IP and ASN, and review logs for any connections to this domain.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17018-0457-772b-a369-f2fa72897b1c/
Cloudflare Radar report: https://radar.cloudflare.com/scan/8d5d0bb3-fd72-4592-ae49-124cfa44abaa
URLQuery report: https://urlquery.net/report/6bfdcad7-de03-43b1-a506-a31b55d5cccc
Stored capture screenshot: https://i.ibb.co/39vmMDFD/836b9af7c037.png
Cloudflare Radar screenshot (2026-10-24T22:48:11Z): https://screenshots.phishdestroy.io/cf/8d5d0bb3-fd72-4592-ae49-124cfa44abaa.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/6bfdcad7-de03-43b1-a506-a31b55d5cccc.png
URLScan screenshot (2026-10-24T22:14:08Z): https://screenshots.phishdestroy.io/us/01a16ffa-5545-705a-b3bc-f2c511aa8540.png
URLScan capture report: https://urlscan.io/result/01a16ffa-5545-705a-b3bc-f2c511aa8540/
URLScan screenshot (2026-10-24T22:39:29Z): https://screenshots.phishdestroy.io/us/01a17011-8bfc-77fb-b86d-7375f86f5dc1.png
URLScan capture report: https://urlscan.io/result/01a17011-8bfc-77fb-b86d-7375f86f5dc1/
VirusTotal report: https://www.virustotal.com/gui/domain/bonkersstyle.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bonkersstyle.shop
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-24 23:23:08 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/39vmMDFD/836b9af7c037.png
  Captured: 2026-10-24 22:47:18 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a17018-0457-772b-a369-f2fa72897b1c.png
  Captured: 2026-10-24 22:47:18 UTC
  Source report: https://urlscan.io/result/01a17018-0457-772b-a369-f2fa72897b1c/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8d5d0bb3-fd72-4592-ae49-124cfa44abaa.png
  Captured: 2026-10-24 22:48:11 UTC
  Source report: https://radar.cloudflare.com/scan/8d5d0bb3-fd72-4592-ae49-124cfa44abaa
  SHA-256: dcfff39fa6e06e277bc3787e528931b150d0fc6bc19cfb6f5d96ee1478f51644
- URLQuery: https://screenshots.phishdestroy.io/uq/6bfdcad7-de03-43b1-a506-a31b55d5cccc.png
  Source report: https://urlquery.net/report/6bfdcad7-de03-43b1-a506-a31b55d5cccc
  SHA-256: dc8b3cfe334443c20ff1b9f38cd96f9b8ef52e48d68f5c45851803ec9f378816
- URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16ffa-5545-705a-b3bc-f2c511aa8540.png
  Captured: 2026-10-24 22:14:08 UTC
  Source report: https://urlscan.io/result/01a16ffa-5545-705a-b3bc-f2c511aa8540/
  SHA-256: 703e91516f59e870568a9581d3b8fd28db853931613931099b49c6a06f67a6dd
- URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a17011-8bfc-77fb-b86d-7375f86f5dc1.png
  Captured: 2026-10-24 22:39:29 UTC
  Source report: https://urlscan.io/result/01a17011-8bfc-77fb-b86d-7375f86f5dc1/
  SHA-256: 703e91516f59e870568a9581d3b8fd28db853931613931099b49c6a06f67a6dd

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-24T22:48:32Z",
        "uuid": "01a17018-0457-772b-a369-f2fa72897b1c",
        "scanned_at": "2026-10-24T22:46:39Z",
        "final_url": "https://bonkersstyle.shop/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://bonkersstyle.shop/",
                "from": "http://bonkersstyle.shop/",
                "status": 307
            },
            {
                "to": "http://bonkersstyle.shop/",
                "from": "https://bonkersstyle.shop/",
                "status": 307
            },
            {
                "to": "https://bonkersstyle.shop/",
                "from": "http://bonkersstyle.shop/",
                "status": 301
            }
        ],
        "ip": "162.222.90.32",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.251.14.94",
            "142.251.14.95",
            "162.222.90.32"
        ],
        "asns": [
            "15169",
            "199242"
        ],
        "countries": [
            "US",
            "GE"
        ],
        "doc_hash": "341d6b279092994c4d75651b03670c78ccc06bfe0b2eabba034e4d3506e4f4f1",
        "script_hashes": [
            "7b7064487d9e49bda3b45855b6dbceeb3f17d94f311da2c689309f6b73078118",
            "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f",
            "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe",
            "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5",
            "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0",
            "9de785ee19ccdf688f837e8bf8d2bbdb4c1dabc04b8ee7166bc1f4057226e49d",
            "91eb4c6e12d5d0f37080b53c6a8b513c579db4854839928eb478164ef6dc1d65",
            "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e",
            "54674023c15e7c7d2c117eacd9399f7e7ff4a224093be6fbd07fba4480b882ba",
            "5594b2dc49c9ed560d32392288f138c9e3f4cccd2c8c71d305060cf653ce80c2"
        ],
        "globals": [
            "webpackChunk_N_E",
            "__next_f",
            "$RC",
            "next",
            "_N_E_STYLE_LOAD",
            "_N_E",
            "Prism"
        ],
        "cookies": [
            "_9k1_cid",
            "_9k1_pv",
            "_9k1_rg",
            "_9k1_rid",
            "_site_domain"
        ],
        "storage_keys": [
            "analytics_session_id",
            "analytics_session_id_ts",
            "__analytics_utm__",
            "analytics_visitor_id"
        ],
        "tls": {
            "san": [
                "bonkersstyle.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "bonkersstyle.shop",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-20T11:59:28Z",
            "valid_from": "2026-10-22T11:59:29Z"
        },
        "domain_age_days": 182,
        "apex_age_days": 182,
        "tls_age_days": 2,
        "tls_valid_days": 89,
        "requests": 39,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 88,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "fakeshop"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Fake Shop"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-24T22:48:34Z",
        "uuid": "8d5d0bb3-fd72-4592-ae49-124cfa44abaa",
        "scanned_at": "2026-10-24T22:48:11Z",
        "final_url": "https://bonkersstyle.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://bonkersstyle.shop/",
                "status": 200
            }
        ],
        "dom_hash": "0a76ff000d39400581eae9d22bbd831dd9066ab998f26d170b092a2cb82236bb",
        "doc_hash": "27ebbaa3f4dc3f8a8fda48be3ab3b0dd1d285aca611eba8fc4fd44d595033f46",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "bonkersstyle.shop",
                "type": "A",
                "value": "162.222.90.32"
            }
        ],
        "dnssec_valid": false,
        "ip": "162.222.90.32"
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-24T23:21:36Z",
        "analysis_at": "2026-10-23T21:40:00Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "created": "2026-04-25T00:00:00Z",
        "updated": "2026-04-25T00:00:00Z",
        "first_seen": "2026-04-25T15:21:15Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "bradley.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "lana.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "162.222.90.32"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "bradley.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-23T21:54:43Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "bonkersstyle.shop"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "5896b40d7993171af9d8537b3d17871368",
            "sha256": "3676cc611f7b97a826f603bec443a0e021e34a475f49a20023d13d929814b463",
            "subject": "bonkersstyle.shop",
            "valid_to": "2027-01-20T11:59:28Z",
            "valid_from": "2026-10-22T11:59:29Z"
        },
        "whois": []
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-24T22:48:54Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "bonkersstyle.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "trackers": {
            "requests": 45,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443,
                8000
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.35.35",
                    "host": "bradley.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.192.182",
                    "host": "lana.ns.cloudflare.com"
                }
            ],
            "zone": "bonkersstyle.shop"
        },
        "location": {
            "ip": "162.222.90.32",
            "asn": "199242",
            "org": "Malakmadze Web LLC",
            "country": "GE"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "bonkersstyle.shop"
        },
        "dns": {
            "A": [
                "162.222.90.32"
            ],
            "NS": [
                "bradley.ns.cloudflare.com",
                "lana.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"bradley.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417922494, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "get_ip": {
            "ip": "162.222.90.32",
            "family": 4
        }
    }
}
```