# PhishDestroy domain threat record: bontofficial.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/bontofficial.shop/
Machine-readable companion: https://phishdestroy.io/domain/bontofficial.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-24 22:43:55 UTC
- Last availability or vendor check: 2026-10-25 03:45:02 UTC
- Stored record updated: 2026-10-25 08:11:55 UTC
- VirusTotal detections in the stored snapshot: 10/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 62.233.61.14
- Registrar in stored WHOIS data: Dynadot Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-04-22 19:08:39 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17014-bb54-7141-b94d-ade06b06b20a/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/bontofficial.shop
- Certificate Transparency search: https://crt.sh/?q=%25.bontofficial.shop
- Web Archive lookup: https://web.archive.org/web/*/https://bontofficial.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI classified the site as malicious because it impersonates the Bont brand, uses its logo and product copy, and advertises deep discounts on the non‑official domain bontofficial.shop. The domain was first seen by PhishDestroy on 2026-10-25. An HTTP request on 2026-10-24 returned a 307 redirect from http to https and a final 200 response for the landing page.

How the scam works
Fake‑store scams copy a legitimate brand’s visual identity and product listings, then lure shoppers with unusually large discounts to collect payment details, personal information, or to redirect victims to credential‑stealing pages. Victims may receive low‑value items, nothing at all, or be sent to further phishing sites.

Evidence
VirusTotal’s analysis on 2026-10-14 (retrieved 2026-10-25) reported 10 detections from 92 engines, including 7 malicious and 3 suspicious labels from vendors such as BitDefender, G‑Data and Lionic. URLScan captured the page on 2026-10-24 and assigned a malicious score of 100, categorising it as phishing and labeling it a “Fake Shop”. Google Safe Browsing checked on 2026-10-25 did not flag the site, external blocklists showed zero listings, OTX had no pulses, and PhishDestroy’s internal blocklist marks the domain as malicious.

Infrastructure
The recorded DNS A record points to IP 62.233.61.14, which the hosting record lists as belonging to Malakmadze Web LLC in Georgia. The domain uses Cloudflare nameservers bradley.ns.cloudflare.com and lana.ns.cloudflare.com and presents a Let’s Encrypt TLS certificate issued on 2026-10-19, valid until 2027-01-17. The domain was created 185 days before first sighting and open ports 22, 80, 443 and 8000 were observed during scanning.

What to do
Do not enter personal, payment or login information on the site and report the URL to the official Bont brand and relevant payment processors. Security teams should block bontofficial.shop at the network perimeter and add its TLS fingerprint to detection rules while reviewing proxy or firewall logs for prior accesses. If any credentials were submitted, treat them as compromised and advise affected users to change passwords immediately.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17014-bb54-7141-b94d-ade06b06b20a/
Cloudflare Radar report: https://radar.cloudflare.com/scan/749e84a1-8217-48cd-92db-f8c2b15bea28
Stored capture screenshot: https://i.ibb.co/ZRxd7PDC/d95accb588fb.png
Cloudflare Radar screenshot (2026-10-24T22:44:43Z): https://screenshots.phishdestroy.io/cf/749e84a1-8217-48cd-92db-f8c2b15bea28.png
URLScan screenshot (2026-10-24T22:18:27Z): https://screenshots.phishdestroy.io/us/01a16ffc-ea45-76d0-b732-5c43b6383b4c.png
URLScan capture report: https://urlscan.io/result/01a16ffc-ea45-76d0-b732-5c43b6383b4c/
URLScan screenshot (2026-10-24T22:21:19Z): https://screenshots.phishdestroy.io/us/01a17000-d64f-721a-97e2-7da26e9cea45.png
URLScan capture report: https://urlscan.io/result/01a17000-d64f-721a-97e2-7da26e9cea45/
VirusTotal report: https://www.virustotal.com/gui/domain/bontofficial.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bontofficial.shop
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-24 22:46:46 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/ZRxd7PDC/d95accb588fb.png
  Captured: 2026-10-24 22:43:55 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a17014-bb54-7141-b94d-ade06b06b20a.png
  Captured: 2026-10-24 22:43:55 UTC
  Source report: https://urlscan.io/result/01a17014-bb54-7141-b94d-ade06b06b20a/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/749e84a1-8217-48cd-92db-f8c2b15bea28.png
  Captured: 2026-10-24 22:44:43 UTC
  Source report: https://radar.cloudflare.com/scan/749e84a1-8217-48cd-92db-f8c2b15bea28
  SHA-256: 8afae42efa7ba5b0e0bcf15703e397f628f014b31a24850ec609a571442a4023
- URLQuery: https://screenshots.phishdestroy.io/uq/b3197c6f-816e-493a-873f-ab0d04311a73.png
  Source report: https://urlquery.net/report/b3197c6f-816e-493a-873f-ab0d04311a73
  SHA-256: 3580770d81cd76765eb14dc5c3ad86b34f4eed8b7cfb010362c8dc2c12433da9
- URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16ffc-ea45-76d0-b732-5c43b6383b4c.png
  Captured: 2026-10-24 22:18:27 UTC
  Source report: https://urlscan.io/result/01a16ffc-ea45-76d0-b732-5c43b6383b4c/
  SHA-256: d67ac048964b19d48e4755800777242fd4f802024a3a59c87113abebdae53d28
- URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a17000-d64f-721a-97e2-7da26e9cea45.png
  Captured: 2026-10-24 22:21:19 UTC
  Source report: https://urlscan.io/result/01a17000-d64f-721a-97e2-7da26e9cea45/
  SHA-256: d67ac048964b19d48e4755800777242fd4f802024a3a59c87113abebdae53d28

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-24T22:45:37Z",
        "uuid": "01a17014-bb54-7141-b94d-ade06b06b20a",
        "scanned_at": "2026-10-24T22:42:58Z",
        "final_url": "https://bontofficial.shop/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://bontofficial.shop/",
                "from": "http://bontofficial.shop/",
                "status": 307
            }
        ],
        "ip": "62.233.61.14",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.250.154.94",
            "142.251.110.95",
            "62.233.61.14"
        ],
        "asns": [
            "15169",
            "199242"
        ],
        "countries": [
            "US",
            "GE"
        ],
        "doc_hash": "088ec5f86c78b4367f31ba52da41f88f0c5c30724f558b820b53be04f5be3960",
        "script_hashes": [
            "7b7064487d9e49bda3b45855b6dbceeb3f17d94f311da2c689309f6b73078118",
            "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f",
            "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe",
            "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5",
            "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0",
            "9de785ee19ccdf688f837e8bf8d2bbdb4c1dabc04b8ee7166bc1f4057226e49d",
            "91eb4c6e12d5d0f37080b53c6a8b513c579db4854839928eb478164ef6dc1d65",
            "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e",
            "54674023c15e7c7d2c117eacd9399f7e7ff4a224093be6fbd07fba4480b882ba",
            "5594b2dc49c9ed560d32392288f138c9e3f4cccd2c8c71d305060cf653ce80c2"
        ],
        "globals": [
            "__next_f",
            "webpackChunk_N_E",
            "next",
            "_N_E_STYLE_LOAD",
            "Prism"
        ],
        "cookies": [
            "_pss_cid",
            "_pss_pv",
            "_pss_rg",
            "_pss_rid",
            "_site_domain"
        ],
        "storage_keys": [
            "analytics_session_id",
            "analytics_session_id_ts",
            "__analytics_utm__",
            "analytics_visitor_id"
        ],
        "tls": {
            "san": [
                "bontofficial.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "bontofficial.shop",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-17T09:05:12Z",
            "valid_from": "2026-10-19T09:05:13Z"
        },
        "domain_age_days": 185,
        "apex_age_days": 185,
        "tls_age_days": 5,
        "tls_valid_days": 89,
        "requests": 42,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 91,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "fakeshop"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Fake Shop"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-24T22:45:39Z",
        "uuid": "749e84a1-8217-48cd-92db-f8c2b15bea28",
        "scanned_at": "2026-10-24T22:44:43Z",
        "final_url": "https://bontofficial.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://bontofficial.shop/",
                "status": 200
            }
        ],
        "dom_hash": "8925ac387b3ec9c196b17f6628dc03a50217a967835acb1c08787cfb37254c92",
        "doc_hash": "9e48a5aafe83adb1580544350f59c2cfb31efb7fb7541b477e84a88f13f1e566",
        "domain_risks": [
            "Ecommerce",
            "Shopping & Auctions",
            "Sports"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "bontofficial.shop",
                "type": "A",
                "value": "62.233.61.14"
            }
        ],
        "dnssec_valid": false,
        "ip": "62.233.61.14"
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-24T22:44:27Z",
        "analysis_at": "2026-10-14T13:36:52Z",
        "stats": {
            "timeout": 0,
            "harmless": 47,
            "malicious": 7,
            "suspicious": 3,
            "undetected": 35
        },
        "detections": {
            "CRDF": "malicious",
            "ESET": "suspicious",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Webroot": "malicious",
            "Netcraft": "malicious",
            "LevelBlue": "suspicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing"
        },
        "reputation": 0,
        "first_seen": "2026-04-22T21:44:02Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "bradley.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "62.233.61.14"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "lana.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "bradley.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-14T13:37:25Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "bontofficial.shop"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "63ed80c5ecad49023dd07a73b263d0248f7",
            "sha256": "9cefedfd5c8dd352384a55a9173e2568b999b58966aeeae23e2889483c9baf90",
            "subject": "bontofficial.shop",
            "valid_to": "2026-11-18T10:02:09Z",
            "valid_from": "2026-08-20T10:02:10Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-24T22:45:55Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "bontofficial.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "trackers": {
            "requests": 44,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443,
                8000
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.35.35",
                    "host": "bradley.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.192.182",
                    "host": "lana.ns.cloudflare.com"
                }
            ],
            "zone": "bontofficial.shop"
        },
        "location": {
            "ip": "62.233.61.14",
            "asn": "199242",
            "org": "Malakmadze Web LLC",
            "country": "GE"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "bontofficial.shop"
        },
        "dns": {
            "A": [
                "62.233.61.14"
            ],
            "NS": [
                "lana.ns.cloudflare.com",
                "bradley.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"bradley.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417667637, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "get_ip": {
            "ip": "62.233.61.14",
            "family": 4
        }
    }
}
```