# PhishDestroy domain threat record: bontskatesonline.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/bontskatesonline.shop/ Machine-readable companion: https://phishdestroy.io/domain/bontskatesonline.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-24 22:19:05 UTC - Last availability or vendor check: 2026-10-27 23:30:36 UTC - Stored record updated: 2026-10-27 23:30:36 UTC - VirusTotal detections in the stored snapshot: 5/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: paypal ## Stored infrastructure - Observed IP address: 162.222.90.245 - Registrar in stored WHOIS data: Dynadot Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-05-22 11:48:02 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16ffd-4c57-745c-9762-343c7653a91d/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bontskatesonline.shop - Certificate Transparency search: https://crt.sh/?q=%25.bontskatesonline.shop - Web Archive lookup: https://web.archive.org/web/*/https://bontskatesonline.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy's automated assessment classified the site as an impersonation phishing page. The page was first seen by PhishDestroy on 2026-10-25, showing a fake Bont Skates store with a “‑65%” discount and a product listing “Quick View Short Track Z Boots $489.00 $171.15”. A capture on 2026-10-24 returned HTTP 200 over HTTPS and Google Safe Browsing did not flag the URL. How the scam works In impersonation fake‑store scams, attackers register a domain that mimics a legitimate brand, replicate product pages and advertise deep discounts to lure shoppers into entering payment or login details. The collected information is then used for credential theft, fraudulent charges, or resale of the data. Evidence VirusTotal scanned the domain on 2026-10-25 and reported five detections out of ninety‑two engines, with CRDF and Netcraft marking it malicious and LevelBlue, Gridinsoft, and alphaMountain.ai flagging it as suspicious or spam. urlscan.io captured the site on 2026-10-25, assigning a malicious score of 100, categorising it as phishing and labeling the brand as “Fake Shop”. Google Safe Browsing checked the URL on 2026-10-25 and did not flag it, while OTX listed four pulses and PhishDestroy’s internal blocklist contains the domain; external blocklists showed no entries. Infrastructure The domain was registered 155 days before the capture and used a Let’s Encrypt certificate issued on 2026-09-18, valid until 2026-12-17. The domain resolved to IP 162.222.90.245, which was associated with ASN 199242 and the organization Malakmadze Web LLC in Georgia, and the DNS records listed Cloudflare nameservers fred.ns.cloudflare.com and sandra.ns.cloudflare.com. Open ports observed were 22, 80, 443 and 8000; DNSSEC was not enabled. What to do Visitors should avoid entering any personal, payment or login information on the site and, if they have already done so, change affected passwords and monitor financial accounts for unauthorized activity. Organizations should block the domain at network perimeters and add the host to threat‑intel feeds. Security teams should review server logs for connections to the recorded IP and consider reporting the abuse to the hosting provider and to the legitimate Bont Skates brand. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16ffd-4c57-745c-9762-343c7653a91d/ Cloudflare Radar report: https://radar.cloudflare.com/scan/4c38f135-7cde-497f-aef9-6c27f1583928 URLQuery report: https://urlquery.net/report/f4b59a03-7695-41ea-ab8a-2eb71d4d7907 Stored capture screenshot: https://i.ibb.co/qw1Brfc/30efc1c77103.png Cloudflare Radar screenshot (2026-10-24T22:20:13Z): https://screenshots.phishdestroy.io/cf/4c38f135-7cde-497f-aef9-6c27f1583928.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/f4b59a03-7695-41ea-ab8a-2eb71d4d7907.png VirusTotal report: https://www.virustotal.com/gui/domain/bontskatesonline.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bontskatesonline.shop Archived copy: https://web.archive.org/web/20261024222048/https://bontskatesonline.shop/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 01:05:09 UTC ## Stored page captures - Primary capture: https://i.ibb.co/qw1Brfc/30efc1c77103.png Captured: 2026-10-24 22:19:05 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16ffd-4c57-745c-9762-343c7653a91d.png Captured: 2026-10-24 22:19:05 UTC Source report: https://urlscan.io/result/01a16ffd-4c57-745c-9762-343c7653a91d/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/4c38f135-7cde-497f-aef9-6c27f1583928.png Captured: 2026-10-24 22:20:13 UTC Source report: https://radar.cloudflare.com/scan/4c38f135-7cde-497f-aef9-6c27f1583928 SHA-256: 3226d119853e39763555dc250392f1898cc22c53a390615bd60a273184315b24 - URLQuery: https://screenshots.phishdestroy.io/uq/f4b59a03-7695-41ea-ab8a-2eb71d4d7907.png Source report: https://urlquery.net/report/f4b59a03-7695-41ea-ab8a-2eb71d4d7907 SHA-256: f453927b7de1459a0fd0b7a53993e26a6e467ad6f442be9953001f8bde53f44a ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-24T22:20:30Z", "uuid": "01a16ffd-4c57-745c-9762-343c7653a91d", "scanned_at": "2026-10-24T22:18:51Z", "final_url": "https://bontskatesonline.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bontskatesonline.shop/", "from": "http://bontskatesonline.shop/", "status": 307 } ], "ip": "162.222.90.245", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.250.217.131", "142.251.45.170", "162.222.90.245" ], "asns": [ "15169", "199242" ], "countries": [ "US", "GE" ], "doc_hash": "b375b348c7ac5bb9129a7d6c98f3c09a2d5e57f379a7d4ee7f6814d6349a864d", "script_hashes": [ "1740720f4a190e727129cfea4b90eddd6e9dffefcf506f2ccd8905d73b937501", "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f", "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe", "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5", "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0", "9de785ee19ccdf688f837e8bf8d2bbdb4c1dabc04b8ee7166bc1f4057226e49d", "91eb4c6e12d5d0f37080b53c6a8b513c579db4854839928eb478164ef6dc1d65", "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e", "54674023c15e7c7d2c117eacd9399f7e7ff4a224093be6fbd07fba4480b882ba", "5594b2dc49c9ed560d32392288f138c9e3f4cccd2c8c71d305060cf653ce80c2" ], "globals": [ "__next_f", "$RC", "webpackChunk_N_E", "next", "_N_E_STYLE_LOAD", "Prism" ], "cookies": [ "_ipd_cid", "_ipd_pv", "_ipd_rg", "_ipd_rid", "_site_domain" ], "storage_keys": [ "analytics_session_id", "analytics_session_id_ts", "__analytics_utm__", "analytics_visitor_id" ], "tls": { "san": [ "bontskatesonline.shop" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "bontskatesonline.shop", "protocol": "TLS 1.3", "valid_to": "2026-12-17T18:37:23Z", "valid_from": "2026-09-18T18:37:24Z" }, "domain_age_days": 155, "apex_age_days": 155, "tls_age_days": 36, "tls_valid_days": 89, "requests": 47, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 96, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "content-type": "text/html; charset=utf-8", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-24T22:20:35Z", "uuid": "4c38f135-7cde-497f-aef9-6c27f1583928", "scanned_at": "2026-10-24T22:20:13Z", "final_url": "https://bontskatesonline.shop/", "status": 200, "history": [ { "url": "https://bontskatesonline.shop/", "status": 200 } ], "dom_hash": "7552465a37969ca5b996b448491d287552afcfe3dd892fabc53d0452a9b35b19", "doc_hash": "26123c9cc6d6d00b9a4871554d66073dfd1498f74349c137f2eee09be650b7ff", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bontskatesonline.shop", "type": "A", "value": "162.222.90.245" } ], "dnssec_valid": false, "ip": "162.222.90.245" }, "vt": { "v": 1, "fetched_at": "2026-10-25T01:02:58Z", "analysis_at": "2026-10-24T23:21:28Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 2, "suspicious": 3, "undetected": 34 }, "detections": { "CRDF": "malicious", "Netcraft": "malicious", "LevelBlue": "suspicious", "Gridinsoft": "suspicious", "alphaMountain.ai": "spam" }, "reputation": 0, "first_seen": "2026-05-22T15:03:01Z", "dns": [ { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "fred.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "sandra.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "162.222.90.245" }, { "ttl": 21600, "type": "NS", "value": "fred.ns.cloudflare.com" } ], "dns_at": "2026-10-24T23:26:44Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "bontskatesonline.shop" ], "issuer": "Let's Encrypt / YE2", "serial": "6baeeacef7fa1747558b8a90e408796068a", "sha256": "3ca8123092a1e569001f673bc9ff76e0a28a50e554125709d2bf37a547520fe1", "subject": "bontskatesonline.shop", "valid_to": "2026-12-17T18:37:23Z", "valid_from": "2026-09-18T18:37:24Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-24T22:20:55Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bontskatesonline.shop" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "trackers": { "requests": 35, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443, 8000 ] }, "dns_server": { "ns": [ { "ip": "108.162.194.34", "host": "sandra.ns.cloudflare.com" }, { "ip": "173.245.59.113", "host": "fred.ns.cloudflare.com" } ], "zone": "bontskatesonline.shop" }, "location": { "ip": "162.222.90.245", "asn": "199242", "org": "Malakmadze Web LLC", "country": "GE" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "bontskatesonline.shop" }, "dns": { "A": [ "162.222.90.245" ], "NS": [ "sandra.ns.cloudflare.com", "fred.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"fred.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415165935, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "162.222.90.245", "family": 4 } } } ```