# PhishDestroy domain threat record: booknookshop.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/booknookshop.shop/ Machine-readable companion: https://phishdestroy.io/domain/booknookshop.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-24 23:02:39 UTC - Last availability or vendor check: 2026-10-24 23:02:39 UTC - Stored record updated: 2026-10-25 07:53:08 UTC - VirusTotal detections in the stored snapshot: 4/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 193.9.48.158 - Registrar in stored WHOIS data: Dynadot Inc. - Registration date in stored WHOIS data: 2026-05-24 13:40:49 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a17025-7adc-730d-a24c-dc69d89632a2/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/booknookshop.shop - Certificate Transparency search: https://crt.sh/?q=%25.booknookshop.shop - Web Archive lookup: https://web.archive.org/web/*/https://booknookshop.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://i.ibb.co/gYzhKn4/3d32833b0cd7.png Captured: 2026-10-24 23:02:39 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a17025-7adc-730d-a24c-dc69d89632a2.png Captured: 2026-10-24 23:02:39 UTC Source report: https://urlscan.io/result/01a17025-7adc-730d-a24c-dc69d89632a2/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/bc3a4510-774b-430e-aa8c-e92689488748.png Captured: 2026-10-24 23:33:08 UTC Source report: https://radar.cloudflare.com/scan/bc3a4510-774b-430e-aa8c-e92689488748 SHA-256: 137d873cd0a16f5ac10b54223c2a9834aa7bbd4efce4081e65703f2cfa385c3e - URLQuery: https://screenshots.phishdestroy.io/uq/ef6d2d01-c163-46d1-8216-25e1c4eb4176.png Source report: https://urlquery.net/report/ef6d2d01-c163-46d1-8216-25e1c4eb4176 SHA-256: 53cf075d5990d26ed89a6b74fc5716fa15375f11c024e0ed5a7edbbe2244580b - URLScan ยท 2026-10-24: https://screenshots.phishdestroy.io/us/01a1702a-c4ee-764b-bf02-e43825b4092a.png Captured: 2026-10-24 23:07:04 UTC Source report: https://urlscan.io/result/01a1702a-c4ee-764b-bf02-e43825b4092a/ SHA-256: 06de491be1f8c653e1772bf55352d8cfee19009c01de3b9be145d9031b19ac0a ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-24T23:33:25Z", "uuid": "01a17025-7adc-730d-a24c-dc69d89632a2", "scanned_at": "2026-10-24T23:01:58Z", "final_url": "https://booknookshop.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://booknookshop.shop/", "from": "http://booknookshop.shop/", "status": 307 }, { "to": "http://booknookshop.shop/", "from": "https://booknookshop.shop/", "status": 307 }, { "to": "https://booknookshop.shop/", "from": "http://booknookshop.shop/", "status": 301 } ], "ip": "193.9.48.158", "domains": [ "placehold.co", "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "188.114.97.3", "142.251.14.94", "142.251.20.95", "193.9.48.158" ], "asns": [ "15169", "199242" ], "countries": [ "US", "RU" ], "script_hashes": [ "30150bd97dac390807c90b437c4364d7d0e8ec810c10498923a37e046201f9ae", "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f", "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe", "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5", "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0", "9de785ee19ccdf688f837e8bf8d2bbdb4c1dabc04b8ee7166bc1f4057226e49d", "91eb4c6e12d5d0f37080b53c6a8b513c579db4854839928eb478164ef6dc1d65", "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e", "54674023c15e7c7d2c117eacd9399f7e7ff4a224093be6fbd07fba4480b882ba", "5594b2dc49c9ed560d32392288f138c9e3f4cccd2c8c71d305060cf653ce80c2" ], "globals": [ "__next_f", "webpackChunk_N_E", "next", "_N_E_STYLE_LOAD", "Prism" ], "cookies": [ "_2jy_cid", "_2jy_pv", "_2jy_rg", "_2jy_rid", "_site_domain" ], "storage_keys": [ "analytics_session_id", "analytics_session_id_ts", "__analytics_utm__", "analytics_visitor_id" ], "domain_age_days": 153, "apex_age_days": 153, "tls_age_days": 33, "tls_valid_days": 89, "requests": 68, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 95, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "content-type": "image/png" } }, "cf": { "v": 1, "fetched_at": "2026-10-24T23:33:26Z", "uuid": "bc3a4510-774b-430e-aa8c-e92689488748", "scanned_at": "2026-10-24T23:33:08Z", "final_url": "https://booknookshop.shop/", "status": 200, "history": [ { "url": "https://booknookshop.shop/", "status": 200 } ], "dom_hash": "b616a25bfc8ea9aaf64aa5c3e73ef31df5273a30347a444c53caf10f2830198d", "doc_hash": "2d7089561d60e263c67e6f1716c31d676f68365e02c18ad8ceb15037a7abf634", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "booknookshop.shop", "type": "A", "value": "193.9.48.158" } ], "dnssec_valid": false, "ip": "193.9.48.158" }, "vt": { "v": 1, "fetched_at": "2026-10-25T07:52:14Z", "analysis_at": "2026-10-24T23:51:41Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 1, "suspicious": 3, "undetected": 35 }, "detections": { "SOCRadar": "suspicious", "LevelBlue": "phishing", "Gridinsoft": "suspicious", "alphaMountain.ai": "suspicious" }, "reputation": 0, "first_seen": "2026-05-24T16:10:32Z", "dns": [ { "ttl": 300, "type": "A", "value": "193.9.48.158" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "chloe.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "felipe.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "chloe.ns.cloudflare.com" } ], "dns_at": "2026-10-24T23:56:56Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "booknookshop.shop" ], "issuer": "Let's Encrypt / YE2", "serial": "69962f7967bb0090728f64d53e2c5eadc94", "sha256": "80c3d9231bf3df131d39b0264aef7d3516de1fcf980558aed1dc10f846dfd9c8", "subject": "booknookshop.shop", "valid_to": "2026-12-20T03:05:39Z", "valid_from": "2026-09-21T03:05:40Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-24T23:33:44Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "booknookshop.shop" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-24T23:04:51Z", "first": "2026-10-24T23:04:51Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 50816 }, "trackers": { "requests": 51, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443, 8000 ] }, "dns_server": { "ns": [ { "ip": "172.64.35.116", "host": "felipe.ns.cloudflare.com" }, { "ip": "172.64.32.85", "host": "chloe.ns.cloudflare.com" } ], "zone": "booknookshop.shop" }, "location": { "ip": "193.9.48.158", "asn": "199242", "org": "Malakmadze Web LLC", "city": "Moscow", "country": "RU" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "booknookshop.shop" }, "dns": { "A": [ "193.9.48.158" ], "NS": [ "chloe.ns.cloudflare.com", "felipe.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"chloe.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415333948, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "193.9.48.158", "family": 4 } } } ```