# PhishDestroy domain threat record: bontglobal.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/bontglobal.shop/ Machine-readable companion: https://phishdestroy.io/domain/bontglobal.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-24 22:18:20 UTC - Last availability or vendor check: 2026-10-27 23:30:10 UTC - Stored record updated: 2026-10-27 23:30:10 UTC - VirusTotal detections in the stored snapshot: 8/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 162.222.90.62 - Registrar in stored WHOIS data: Dynadot Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-04-16 22:00:00 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16ffc-e26f-71eb-804b-c50d04c9ac12/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bontglobal.shop - Certificate Transparency search: https://crt.sh/?q=%25.bontglobal.shop - Web Archive lookup: https://web.archive.org/web/*/https://bontglobal.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s automated intake on 2026-10-24 classified the site as malicious, citing a fake‑store that pretends to sell Bont products with deep discounts while the domain does not belong to the official brand. The domain was first seen by PhishDestroy on 2026-10-25 when a capture returned HTTP 200 and displayed the title “Bont Global | Up to 70% Off Selected Items”. How the scam works A fake‑store impersonates a known brand, advertises large discounts, and lures visitors into providing payment details, personal information, or credentials under the pretense of a legitimate purchase. The operator typically collects this data for resale or uses it to charge fraudulent transactions, without delivering any goods. Evidence urlscan captured the site on 2026-10-25 and gave it a malicious overall score of 100, labeling it as phishing and a fake shop. VirusTotal analysis retrieved on 2026-10-25 reported 8 detections across 92 engines, with four vendors marking it malicious and four marking it suspicious. Google Safe Browsing checked on 2026-10-25 did not flag the domain. OTX listed three pulses as of 2026-10-25. PhishDestroy’s internal blocklist contains the domain, while external blocklists showed zero matches on the same date. Infrastructure The domain was registered on 2026-04-17, giving it 206 days of age at capture. The recorded IP was 162.222.90.62, belonging to ASN 199242 and the organization Malakmadze Web LLC, with the IP geolocated to Georgia. Cloudflare nameservers bradley.ns.cloudflare.com and lana.ns.cloudflare.com served the zone, and the site used a Let's Encrypt TLS certificate valid until 2026-12-27. Open ports observed were 22, 80, 443 and 8000; DNSSEC was not enabled. What to do Users should avoid entering any personal, payment, or login information on the site and close the page immediately. If credentials were submitted, change the associated passwords and monitor accounts for unauthorized activity. Defenders should block bontglobal.shop, add the domain to internal blocklists, and review network logs for connections to the recorded IP. No wallet‑related actions are required because wallet recommendations are disabled for this domain. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16ffc-e26f-71eb-804b-c50d04c9ac12/ Cloudflare Radar report: https://radar.cloudflare.com/scan/ba4ffcdf-6392-48e6-87bf-6c15d50214f6 URLQuery report: https://urlquery.net/report/0468e0be-d278-4695-9e9e-c1ca9536eabd Stored capture screenshot: https://i.ibb.co/HT8NqtRt/57e17550eefe.png Cloudflare Radar screenshot (2026-10-24T22:52:18Z): https://screenshots.phishdestroy.io/cf/ba4ffcdf-6392-48e6-87bf-6c15d50214f6.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/0468e0be-d278-4695-9e9e-c1ca9536eabd.png VirusTotal report: https://www.virustotal.com/gui/domain/bontglobal.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bontglobal.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-24 22:55:24 UTC ## Stored page captures - Primary capture: https://i.ibb.co/HT8NqtRt/57e17550eefe.png Captured: 2026-10-24 22:18:20 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16ffc-e26f-71eb-804b-c50d04c9ac12.png Captured: 2026-10-24 22:18:20 UTC Source report: https://urlscan.io/result/01a16ffc-e26f-71eb-804b-c50d04c9ac12/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/ba4ffcdf-6392-48e6-87bf-6c15d50214f6.png Captured: 2026-10-24 22:52:18 UTC Source report: https://radar.cloudflare.com/scan/ba4ffcdf-6392-48e6-87bf-6c15d50214f6 SHA-256: a2d15e0a8b3407d98a9b5657ea094433967240e4af1e52fd00a5adbbb526381d - URLQuery: https://screenshots.phishdestroy.io/uq/0468e0be-d278-4695-9e9e-c1ca9536eabd.png Source report: https://urlquery.net/report/0468e0be-d278-4695-9e9e-c1ca9536eabd SHA-256: ce030b913ec1815d34d344b0df3cfd7ca1a1911e7f61951ebdd062177b7f9031 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-24T22:25:47Z", "uuid": "01a16ffc-e26f-71eb-804b-c50d04c9ac12", "scanned_at": "2026-10-24T22:16:55Z", "final_url": "https://bontglobal.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bontglobal.shop/", "from": "http://bontglobal.shop/", "status": 307 } ], "ip": "162.222.90.62", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.250.68.195", "142.251.45.202", "162.222.90.62" ], "asns": [ "15169", "199242" ], "countries": [ "US", "GE" ], "doc_hash": "a19766b1402a84a55ba8a868d0942f6169c6d9cc3137a7bcf00ab1348a1ad223", "script_hashes": [ "7b7064487d9e49bda3b45855b6dbceeb3f17d94f311da2c689309f6b73078118", "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f", "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe", "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5", "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0", "9de785ee19ccdf688f837e8bf8d2bbdb4c1dabc04b8ee7166bc1f4057226e49d", "91eb4c6e12d5d0f37080b53c6a8b513c579db4854839928eb478164ef6dc1d65", "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e", "54674023c15e7c7d2c117eacd9399f7e7ff4a224093be6fbd07fba4480b882ba", "5594b2dc49c9ed560d32392288f138c9e3f4cccd2c8c71d305060cf653ce80c2" ], "globals": [ "__next_f", "webpackChunk_N_E", "next", "_N_E_STYLE_LOAD", "Prism" ], "cookies": [ "_6yp_cid", "_6yp_pv", "_6yp_rg", "_6yp_rid", "_site_domain" ], "storage_keys": [ "analytics_session_id", "analytics_session_id_ts", "__analytics_utm__", "analytics_visitor_id" ], "tls": { "san": [ "bontglobal.shop" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "bontglobal.shop", "protocol": "TLS 1.3", "valid_to": "2026-12-27T11:06:27Z", "valid_from": "2026-09-28T11:06:28Z" }, "domain_age_days": 206, "apex_age_days": 206, "tls_age_days": 26, "tls_valid_days": 89, "requests": 51, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 88, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "content-type": "text/html; charset=utf-8", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-24T22:54:25Z", "uuid": "ba4ffcdf-6392-48e6-87bf-6c15d50214f6", "scanned_at": "2026-10-24T22:52:18Z", "final_url": "https://bontglobal.shop/", "status": 200, "history": [ { "url": "https://bontglobal.shop/", "status": 200 } ], "dom_hash": "9cb86ca844162ae1e12e11f6a5630a0ea665fc938f228d09984fc03672a3e927", "doc_hash": "8970869626bb4cab65fedbd1f2e60f065a07fc934a0f055bef03605df2b8fc76", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bontglobal.shop", "type": "A", "value": "162.222.90.62" } ], "dnssec_valid": false, "ip": "162.222.90.62" }, "vt": { "v": 1, "fetched_at": "2026-10-24T22:51:53Z", "analysis_at": "2026-10-11T16:01:08Z", "stats": { "timeout": 0, "harmless": 50, "malicious": 4, "suspicious": 4, "undetected": 34 }, "detections": { "ESET": "suspicious", "G-Data": "phishing", "CyRadar": "suspicious", "Netcraft": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "suspicious", "Bfore.Ai PreCrime": "malicious" }, "reputation": 0, "created": "2026-04-17T00:00:00Z", "updated": "2026-04-17T00:00:00Z", "first_seen": "2026-04-01T12:42:40Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "lana.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "bradley.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "162.222.90.62" }, { "ttl": 21600, "type": "NS", "value": "bradley.ns.cloudflare.com" } ], "dns_at": "2026-10-11T17:00:20Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "bontglobal.shop" ], "issuer": "Let's Encrypt / YE2", "serial": "53bf6ddbd37b8572caa41668009bcde43f4", "sha256": "0e05f85c8ffd39894062dcf5ec5cb2ddeef274f329b5e335ad923e6fc1fb4c43", "subject": "bontglobal.shop", "valid_to": "2026-12-27T11:06:27Z", "valid_from": "2026-09-28T11:06:28Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-24T22:54:47Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bontglobal.shop" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "trackers": { "requests": 44, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443, 8000 ] }, "dns_server": { "ns": [ { "ip": "108.162.195.35", "host": "bradley.ns.cloudflare.com" }, { "ip": "108.162.192.182", "host": "lana.ns.cloudflare.com" } ], "zone": "bontglobal.shop" }, "location": { "ip": "162.222.90.62", "asn": "199242", "org": "Malakmadze Web LLC", "country": "GE" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "bontglobal.shop" }, "dns": { "A": [ "162.222.90.62" ], "NS": [ "bradley.ns.cloudflare.com", "lana.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"bradley.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417181879, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "162.222.90.62", "family": 4 } } } ```