# PhishDestroy domain threat record: bossfightstudio.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/bossfightstudio.shop/ Machine-readable companion: https://phishdestroy.io/domain/bossfightstudio.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-27 04:44:35 UTC - Last availability or vendor check: 2026-10-28 00:29:57 UTC - Stored record updated: 2026-10-28 00:29:57 UTC - VirusTotal detections in the stored snapshot: 3/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 162.222.90.195 - Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND - Last stored HTTP status: 200 ## Evidence links - URLScan report: https://urlscan.io/result/01a17bb8-a7ca-7486-be36-5f3118cc91eb/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bossfightstudio.shop - Certificate Transparency search: https://crt.sh/?q=%25.bossfightstudio.shop - Web Archive lookup: https://web.archive.org/web/*/https://bossfightstudio.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed bossfightstudio.shop as a suspicious domain based on multi‑source indicators, notably a malicious verdict from URLScan and VirusTotal detections. The domain was first seen by PhishDestroy on 2026-10-27. An HTTP request on that date returned a 200 OK response after a 307 redirect from http to https, but no page title was recorded. How the scam works The classification reflects a generic phishing risk where a site pretends to be an online shop to trick visitors into submitting credentials, payment details, or other personal information. No specific credential‑harvesting form or payment flow was observed on the captured page, so the exact method cannot be confirmed for this domain. Evidence URLScan captured the site twice; the 2026-10-07 scan (UUID 01a11770-3063-754d-9a0e-0a9bb2533254) received a malicious verdict, and the 2026-10-27 scan (UUID 01a17bb8-a7ca-7486-be36-5f3118cc91eb) was marked malicious with a phishing category and a score of 100. VirusTotal reported three detections out of 92 engines on 2026-10-27, including one malicious label from Netcraft and two suspicious labels from Gridinsoft and alphaMountain.ai. Google Safe Browsing checked on 2026-10-27 did not flag the domain. OTX listed four pulses referencing the domain on the same day. No external blocklists reported the domain, while PhishDestroy’s internal list marked it as malicious. Infrastructure The domain was 160 days old and used Cloudflare DNS (brady.ns.cloudflare.com, khloe.ns.cloudflare.com). The recorded IP was 162.222.90.195, listed under Malakmadze Web LLC in Georgia (ASN 199242). A Let’s Encrypt certificate was observed, issued on 2026-09-17 and valid until 2026-12-16. Open ports observed were 22, 443 and 8000, and DNSSEC was not enabled. What to do Visitors should avoid entering any credentials or personal data on the site; if they have already done so, they should change passwords on affected accounts and monitor for unauthorized activity. Security teams can block the domain and add it to internal threat feeds, and review logs for connections to 162.222.90.195. No wallet‑related actions are required because wallet recommendations are disabled for this listing. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a17bb8-a7ca-7486-be36-5f3118cc91eb/ Cloudflare Radar report: https://radar.cloudflare.com/scan/888f4fb9-36a4-45eb-9566-0a28fb144fb0 URLQuery report: https://urlquery.net/report/a0109ac7-e386-4b88-92fd-c6201a777450 Stored capture screenshot: https://i.ibb.co/4wg1C1VR/d81f61349352.png Cloudflare Radar screenshot (2026-10-27T04:53:53Z): https://screenshots.phishdestroy.io/cf/888f4fb9-36a4-45eb-9566-0a28fb144fb0.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/a0109ac7-e386-4b88-92fd-c6201a777450.png URLScan screenshot (2026-10-07T17:36:40Z): https://screenshots.phishdestroy.io/us/01a11770-3063-754d-9a0e-0a9bb2533254.png URLScan capture report: https://urlscan.io/result/01a11770-3063-754d-9a0e-0a9bb2533254/ VirusTotal report: https://www.virustotal.com/gui/domain/bossfightstudio.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bossfightstudio.shop Archived copy: https://web.archive.org/web/20261027051752/https://bossfightstudio.shop/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-27 07:33:54 UTC ## Stored page captures - Primary capture: https://i.ibb.co/4wg1C1VR/d81f61349352.png Captured: 2026-10-27 04:59:24 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a17bb8-a7ca-7486-be36-5f3118cc91eb.png Captured: 2026-10-27 04:59:24 UTC Source report: https://urlscan.io/result/01a17bb8-a7ca-7486-be36-5f3118cc91eb/ - URLScan · 2026-10-07: https://screenshots.phishdestroy.io/us/01a11770-3063-754d-9a0e-0a9bb2533254.png Captured: 2026-10-07 17:36:40 UTC Source report: https://urlscan.io/result/01a11770-3063-754d-9a0e-0a9bb2533254/ SHA-256: 48cd240aa2046ac6667bb5560192df64b61589278118ee43e71a0a260144b040 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/888f4fb9-36a4-45eb-9566-0a28fb144fb0.png Captured: 2026-10-27 04:53:53 UTC Source report: https://radar.cloudflare.com/scan/888f4fb9-36a4-45eb-9566-0a28fb144fb0 SHA-256: c07330302881fbfb1980b93f180718508dd4d86d8efa482899dff32819f40f40 - URLQuery: https://screenshots.phishdestroy.io/uq/a0109ac7-e386-4b88-92fd-c6201a777450.png Source report: https://urlquery.net/report/a0109ac7-e386-4b88-92fd-c6201a777450 SHA-256: 9b30a868bb2664c725cd9a6646e8f4956db09ef63897e326361375f4d6c57891 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-27T05:14:46Z", "uuid": "01a17bb8-a7ca-7486-be36-5f3118cc91eb", "scanned_at": "2026-10-27T04:57:55Z", "final_url": "https://bossfightstudio.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bossfightstudio.shop/", "from": "http://bossfightstudio.shop/", "status": 307 } ], "ip": "162.222.90.195", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.251.167.94", "142.251.167.95", "162.222.90.195" ], "asns": [ "15169", "199242" ], "countries": [ "US", "GE" ], "doc_hash": "04d05978fdb111358073ab0524e5c1fafc0826615c206987618416b8bd8a4747", "script_hashes": [ "1740720f4a190e727129cfea4b90eddd6e9dffefcf506f2ccd8905d73b937501", "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f", "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe", "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5", "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0", "9de785ee19ccdf688f837e8bf8d2bbdb4c1dabc04b8ee7166bc1f4057226e49d", "91eb4c6e12d5d0f37080b53c6a8b513c579db4854839928eb478164ef6dc1d65", "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e", "54674023c15e7c7d2c117eacd9399f7e7ff4a224093be6fbd07fba4480b882ba", "5594b2dc49c9ed560d32392288f138c9e3f4cccd2c8c71d305060cf653ce80c2" ], "globals": [ "__next_f", "webpackChunk_N_E", "next", "_N_E_STYLE_LOAD", "Prism" ], "cookies": [ "_ifg_cid", "_ifg_pv", "_ifg_rg", "_ifg_rid", "_site_domain" ], "storage_keys": [ "analytics_session_id", "analytics_session_id_ts", "__analytics_utm__", "analytics_visitor_id" ], "domain_age_days": 160, "apex_age_days": 160, "tls_age_days": 40, "tls_valid_days": 89, "requests": 59, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 88, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "content-type": "image/png" } }, "cf": { "v": 1, "fetched_at": "2026-10-27T04:55:51Z", "uuid": "888f4fb9-36a4-45eb-9566-0a28fb144fb0", "scanned_at": "2026-10-27T04:53:53Z", "final_url": "https://bossfightstudio.shop/", "status": 200, "history": [ { "url": "https://bossfightstudio.shop/", "status": 200 } ], "dom_hash": "050a0d2e326ee7ccb69e7c053124752515cde941666089ffcd555a560d313937", "doc_hash": "ed72c8c39b2a1819098887e2d6b69d0015d197ea33c84e7ddfcfcf1214d58d2e", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bossfightstudio.shop", "type": "A", "value": "162.222.90.195" } ], "dnssec_valid": false, "ip": "162.222.90.195" }, "vt": { "v": 1, "fetched_at": "2026-10-27T07:32:38Z", "analysis_at": "2026-10-24T09:55:28Z", "stats": { "timeout": 0, "harmless": 54, "malicious": 1, "suspicious": 2, "undetected": 35 }, "detections": { "Netcraft": "malicious", "Gridinsoft": "suspicious", "alphaMountain.ai": "suspicious" }, "reputation": 0, "first_seen": "2026-05-20T03:47:29Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "brady.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "khloe.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "brady.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "162.222.90.195" } ], "dns_at": "2026-10-24T10:45:14Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "bossfightstudio.shop" ], "issuer": "Let's Encrypt / YE1", "serial": "55a189552bc77f2acae6152772b5e0645ad", "sha256": "0270e89ba6a205f2395ad1a10f007ff8af44c03ee87ec6d1fab4b45a578a1106", "subject": "bossfightstudio.shop", "valid_to": "2026-12-16T00:45:27Z", "valid_from": "2026-09-17T00:45:28Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-27T04:56:09Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bossfightstudio.shop" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "trackers": { "requests": 34, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 443, 8000 ] }, "dns_server": { "ns": [ { "ip": "162.159.38.139", "host": "khloe.ns.cloudflare.com" }, { "ip": "172.64.35.215", "host": "brady.ns.cloudflare.com" } ], "zone": "bossfightstudio.shop" }, "location": { "ip": "162.222.90.195", "asn": "199242", "org": "Malakmadze Web LLC", "country": "GE" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "bossfightstudio.shop" }, "dns": { "A": [ "162.222.90.195" ], "NS": [ "brady.ns.cloudflare.com", "khloe.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"brady.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415153956, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "162.222.90.195", "family": 4 } } } ```