# PhishDestroy domain threat record: books2dooronline.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/books2dooronline.shop/
Machine-readable companion: https://phishdestroy.io/domain/books2dooronline.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-24 22:26:36 UTC
- Last availability or vendor check: 2026-10-25 03:21:56 UTC
- Stored record updated: 2026-10-25 09:13:42 UTC
- VirusTotal detections in the stored snapshot: 5/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: paypal

## Stored infrastructure

- Observed IP address: 46.245.239.167
- Registrar in stored WHOIS data: Dynadot Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-05-12 07:31:45 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17004-42d7-76b9-bfb6-abbe15575f31/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/books2dooronline.shop
- Certificate Transparency search: https://crt.sh/?q=%25.books2dooronline.shop
- Web Archive lookup: https://web.archive.org/web/*/https://books2dooronline.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI classified the site as malicious because it pretends to be the legitimate “Books2Door” store while using the unrelated domain books2dooronline.shop. The recorded page title read “More story time, less screen time | Books2Door” and the page was fetched on 2026-10-24 without cross‑site redirects. The domain first appeared in PhishDestroy’s monitoring on 2026-10-25.

How the scam works
Fake online stores copy a well‑known brand’s name and visual cues, advertise deep discounts, and lure shoppers into entering payment details or login credentials that are then harvested for fraud. Victims may receive no product after payment, resulting in financial loss.

Evidence
VirusTotal scanned the domain on 2026-10-11 and reported five detections from ninety‑two engines, including three malicious and two suspicious classifications. Google Safe Browsing checked on 2026-10-25 did not flag the site, and OTX showed zero pulses on the same date. urlscan captured the page on 2026-10-25 and returned a malicious verdict with a 100 score, labeling it as phishing and a fake shop. PhishDestroy’s internal blocklist contained the domain as of 2026-10-24, while external blocklists reported no entries.

Infrastructure
The recorded IP was 46.245.239.167, which was associated with Malakmadze Web LLC in Georgia, and the domain used Cloudflare DNS at the time of capture. The TLS certificate from Let’s Encrypt was issued on 2026-09-08 and was valid until 2026-12-07, and the domain was 165 days old when observed.

What to do
Visitors should not submit any personal, login, or payment information to this site and should change any credentials that may have been entered. Organizations should add the domain to their blocklists and monitor network logs for connections to the recorded IP. Continue to watch for updated indicators and adjust defenses accordingly.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17004-42d7-76b9-bfb6-abbe15575f31/
Cloudflare Radar report: https://radar.cloudflare.com/scan/a37475be-93c1-402a-afaa-b3c883b9bb15
Stored capture screenshot: https://i.ibb.co/dJBdhY2K/c0a5f5cac75e.png
Cloudflare Radar screenshot (2026-10-24T22:28:30Z): https://screenshots.phishdestroy.io/cf/a37475be-93c1-402a-afaa-b3c883b9bb15.png
VirusTotal report: https://www.virustotal.com/gui/domain/books2dooronline.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=books2dooronline.shop
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-24 22:30:02 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/dJBdhY2K/c0a5f5cac75e.png
  Captured: 2026-10-24 22:26:36 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a17004-42d7-76b9-bfb6-abbe15575f31.png
  Captured: 2026-10-24 22:26:36 UTC
  Source report: https://urlscan.io/result/01a17004-42d7-76b9-bfb6-abbe15575f31/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a37475be-93c1-402a-afaa-b3c883b9bb15.png
  Captured: 2026-10-24 22:28:30 UTC
  Source report: https://radar.cloudflare.com/scan/a37475be-93c1-402a-afaa-b3c883b9bb15
  SHA-256: b83ae507ec99b7b6d96b27386e76108d6d0a474f9e1f4536e3e8cb1e008d5753
- URLQuery: https://screenshots.phishdestroy.io/uq/e711430e-4057-4fd7-aefd-c59a98e19966.png
  Source report: https://urlquery.net/report/e711430e-4057-4fd7-aefd-c59a98e19966
  SHA-256: e39282b263dde677adad5e737444c6a1934b97a98e7a88c14527a7b9acbb24d6

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-24T22:29:14Z",
        "uuid": "01a17004-42d7-76b9-bfb6-abbe15575f31",
        "scanned_at": "2026-10-24T22:24:58Z",
        "final_url": "https://books2dooronline.shop/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://books2dooronline.shop/",
                "from": "http://books2dooronline.shop/",
                "status": 307
            }
        ],
        "ip": "46.245.239.167",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.251.20.94",
            "142.250.154.95",
            "46.245.239.167"
        ],
        "asns": [
            "15169",
            "199242"
        ],
        "countries": [
            "US",
            "GE"
        ],
        "doc_hash": "78a8b1ed938bfdd1ca8f67cf3aae3226cf679802a33343f6e4e2d8ba5e0d2b41",
        "script_hashes": [
            "a393c87c7b0222a8a019e943417c7189a0777c489c7e72d3d65c193e06522430",
            "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f",
            "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe",
            "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5",
            "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0",
            "9de785ee19ccdf688f837e8bf8d2bbdb4c1dabc04b8ee7166bc1f4057226e49d",
            "91eb4c6e12d5d0f37080b53c6a8b513c579db4854839928eb478164ef6dc1d65",
            "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e",
            "54674023c15e7c7d2c117eacd9399f7e7ff4a224093be6fbd07fba4480b882ba",
            "5594b2dc49c9ed560d32392288f138c9e3f4cccd2c8c71d305060cf653ce80c2"
        ],
        "globals": [
            "__next_f",
            "webpackChunk_N_E",
            "next",
            "_N_E_STYLE_LOAD",
            "Prism"
        ],
        "cookies": [
            "_9y8_cid",
            "_9y8_pv",
            "_9y8_rg",
            "_9y8_rid",
            "_site_domain"
        ],
        "storage_keys": [
            "analytics_session_id",
            "analytics_session_id_ts",
            "__analytics_utm__",
            "analytics_visitor_id"
        ],
        "tls": {
            "san": [
                "books2dooronline.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "books2dooronline.shop",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-07T23:51:50Z",
            "valid_from": "2026-09-08T23:51:51Z"
        },
        "domain_age_days": 165,
        "apex_age_days": 165,
        "tls_age_days": 45,
        "tls_valid_days": 89,
        "requests": 53,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 95,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "fakeshop"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Fake Shop"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-24T22:29:15Z",
        "uuid": "a37475be-93c1-402a-afaa-b3c883b9bb15",
        "scanned_at": "2026-10-24T22:28:30Z",
        "final_url": "https://books2dooronline.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://books2dooronline.shop/",
                "status": 200
            }
        ],
        "dom_hash": "e09fc2656ef573f28ac93a0fe27362f65951f52af916ab9229e927911f92f1bc",
        "doc_hash": "aaff048964615437dfcfca4b728d5abc60558570b2a0e591f7b608ba07c149d6",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "books2dooronline.shop",
                "type": "A",
                "value": "46.245.239.167"
            }
        ],
        "dnssec_valid": false,
        "ip": "46.245.239.167"
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-24T22:27:34Z",
        "analysis_at": "2026-10-11T15:44:29Z",
        "stats": {
            "timeout": 0,
            "harmless": 53,
            "malicious": 3,
            "suspicious": 2,
            "undetected": 34
        },
        "detections": {
            "CRDF": "malicious",
            "Netcraft": "malicious",
            "LevelBlue": "phishing",
            "Gridinsoft": "suspicious",
            "alphaMountain.ai": "spam"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Spam, Suspicious (alphaMountain.ai)",
            "Forcepoint ThreatSeeker": "shopping"
        },
        "first_seen": "2026-05-12T11:19:12Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "doug.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "val.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "46.245.239.167"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "doug.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-11T16:16:29Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "books2dooronline.shop"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "6d549ba22f9740d2ea1133e290b7783796e",
            "sha256": "b06c22a5aacd692d214a7f368946db7d99b9d8e5ce3ea79613308f0e78162142",
            "subject": "books2dooronline.shop",
            "valid_to": "2026-12-07T23:51:50Z",
            "valid_from": "2026-09-08T23:51:51Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-24T22:29:33Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "books2dooronline.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-24T22:28:11Z",
            "first": "2026-10-24T22:28:11Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 61915
        },
        "trackers": {
            "requests": 39,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443,
                8000
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.33.159",
                    "host": "doug.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.32.234",
                    "host": "val.ns.cloudflare.com"
                }
            ],
            "zone": "books2dooronline.shop"
        },
        "location": {
            "ip": "46.245.239.167",
            "asn": "199242",
            "org": "Malakmadze Web LLC",
            "country": "GE"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "books2dooronline.shop"
        },
        "dns": {
            "A": [
                "46.245.239.167"
            ],
            "NS": [
                "val.ns.cloudflare.com",
                "doug.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"doug.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414851893, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "get_ip": {
            "ip": "46.245.239.167",
            "family": 4
        }
    }
}
```