# PhishDestroy domain threat record: bosty.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/bosty.shop/ Machine-readable companion: https://phishdestroy.io/domain/bosty.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-27 04:46:59 UTC - Last availability or vendor check: 2026-10-27 23:01:10 UTC - Stored record updated: 2026-10-27 23:21:34 UTC - VirusTotal detections in the stored snapshot: 8/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: paypal ## Stored infrastructure - Observed IP address: 188.244.119.61 - Registrar in stored WHOIS data: DYNADOT LLC - Registration date in stored WHOIS data: 2024-02-05 23:00:00 UTC ## Evidence links - URLScan report: https://urlscan.io/result/019ff0e0-23a2-72aa-a3ed-9492f31e71f1/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bosty.shop - Certificate Transparency search: https://crt.sh/?q=%25.bosty.shop - Web Archive lookup: https://web.archive.org/web/*/https://bosty.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added bosty.shop to its internal blocklist on 2026-10-27 after the intake process flagged three VirusTotal vendors as malicious. The recorded page title is "bosty.shop" and the site returned HTTP 200 when captured on 2026-08-11. How the scam works The available detections suggest a generic phishing risk where a site could be used to trick visitors into revealing credentials or personal data. No specific credential‑stealing form or other malicious behavior was observed in the captured page, so the exact tactic remains undefined. Evidence VirusTotal reported eight detections across 92 engines on 2026-10-27, with five classified as malicious (including Bfore.Ai PreCrime, BitDefender and G-Data) and three as suspicious. urlscan captured the site on 2026-08-11 and issued a malicious phishing verdict with a score of 100. Google Safe Browsing showed no flag on 2026-10-27, OTX listed two pulses, and PhishDestroy’s internal blocklist marks the domain as malicious while external blocklists returned zero hits. Infrastructure The domain was registered on 2024-02-06 through Dynadot LLC. The recorded IP 188.244.119.61 belongs to Malakmadze Web LLC in Georgia, and the site uses a Let’s Encrypt TLS certificate valid from 2026-08-01 to 2026-10-30. Cloudflare nameservers ines.ns.cloudflare.com and jerome.ns.cloudflare.com were observed, and DNSSEC was not enabled. What to do Visitors should avoid entering any credentials or personal information on bosty.shop and change passwords if they suspect they may have been submitted. Organizations should block the domain and monitor network logs for connections to 188.244.119.61. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/019ff0e0-23a2-72aa-a3ed-9492f31e71f1/ Cloudflare Radar report: https://radar.cloudflare.com/scan/145d9d31-2917-4f78-915b-1fec95c85f0f Stored capture screenshot: https://urlscan.io/screenshots/019ff0e0-23a2-72aa-a3ed-9492f31e71f1.png Cloudflare Radar screenshot (2026-10-27T04:53:53Z): https://screenshots.phishdestroy.io/cf/145d9d31-2917-4f78-915b-1fec95c85f0f.png VirusTotal report: https://www.virustotal.com/gui/domain/bosty.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bosty.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-27 17:27:28 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/019ff0e0-23a2-72aa-a3ed-9492f31e71f1.png Captured: 2026-10-27 04:46:59 UTC - URLScan capture: https://screenshots.phishdestroy.io/019ff0e0-23a2-72aa-a3ed-9492f31e71f1.png Source report: https://urlscan.io/result/019ff0e0-23a2-72aa-a3ed-9492f31e71f1/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/145d9d31-2917-4f78-915b-1fec95c85f0f.png Captured: 2026-10-27 04:53:53 UTC Source report: https://radar.cloudflare.com/scan/145d9d31-2917-4f78-915b-1fec95c85f0f SHA-256: a5db7ab655d3900bfb2bf44f8483ca7ce06fc6f795376f14b777be50f1f0af62 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-27T04:55:13Z", "uuid": "019ff0e0-23a2-72aa-a3ed-9492f31e71f1", "scanned_at": "2026-08-11T12:50:58Z", "final_url": "https://bosty.shop/", "status": 200, "ip": "188.244.119.61", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.251.167.94", "64.233.180.95", "188.244.119.61" ], "asns": [ "15169", "199242" ], "countries": [ "US", "GE" ], "doc_hash": "44bb3789e866f393cd77b4cd3192006f9bf56cba71dafab947ea0559af1d1431", "script_hashes": [ "00e7fc8012193c82c8bb887a60461317c0bfb90809f0ec7f8bd3184c5c5134f6", "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f", "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe", "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5", "b9adf20c93dc3a7aa37cdb5f5b6d86d4252964d97a6cf3fd5ce6f143da225d82", "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e", "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0", "cac7c96146dad0bbe55d718c23f7af31cca28565413d9915c256932a69ae83df", "5ce0b496388a37e10a16f71e30e31690ceea44e3cb06199b22e675f315a58bcc", "915eca2ddd30cf0f0dcf655424d66e36e55d66a038b3365bfff815980b355c29" ], "globals": [ "__next_f", "webpackChunk_N_E", "_N_E", "next", "_N_E_STYLE_LOAD", "Prism" ], "cookies": [ "_i63_cid", "_i63_rg", "_i63_rid", "_site_domain" ], "tls": { "san": [ "bosty.shop" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "bosty.shop", "protocol": "TLS 1.3", "valid_to": "2026-10-30T06:09:27Z", "valid_from": "2026-08-01T06:09:28Z" }, "domain_age_days": 2261, "apex_age_days": 2261, "tls_age_days": 10, "tls_valid_days": 89, "requests": 53, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 58, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "content-type": "text/html; charset=utf-8", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-27T04:55:20Z", "uuid": "145d9d31-2917-4f78-915b-1fec95c85f0f", "scanned_at": "2026-10-27T04:53:53Z", "final_url": "https://bosty.shop/", "history": [ { "url": "https://bosty.shop/", "status": 0 } ], "dom_hash": "94bfc7c24186e5b245b5675859fb84b248547086370961e5637590177432b219", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bosty.shop", "type": "A", "value": "188.244.119.61" } ], "dnssec_valid": false }, "vt": { "v": 1, "fetched_at": "2026-10-27T17:25:29Z", "analysis_at": "2026-10-27T05:48:18Z", "stats": { "timeout": 0, "harmless": 51, "malicious": 5, "suspicious": 3, "undetected": 33 }, "detections": { "ESET": "suspicious", "G-Data": "phishing", "SOCRadar": "phishing", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "suspicious", "Bfore.Ai PreCrime": "malicious", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Suspicious (alphaMountain.ai)" }, "created": "2024-02-06T00:00:00Z", "updated": "2024-02-06T00:00:00Z", "first_seen": "2024-02-08T08:05:44Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "ines.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "ines.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "jerome.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "188.244.119.61" } ], "dns_at": "2026-10-27T05:54:25Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "bosty.shop" ], "issuer": "Let's Encrypt / YE2", "serial": "64a65fc0f4df398448c56c7bd644c520376", "sha256": "669171eea18310a9e9eb713e666aa7e634616229b2c879f0be7c7088be2a6dd2", "subject": "bosty.shop", "valid_to": "2026-10-30T06:09:27Z", "valid_from": "2026-08-01T06:09:28Z" }, "whois": [] }, "webcheck": { "v": 1, "fetched_at": "2026-10-27T04:55:59Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bosty.shop" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2025-02-17T17:22:55Z", "first": "2024-04-19T07:54:07Z", "changes": 3, "days_archived": 4, "scans_per_day": 0.01, "avg_page_bytes": 3338 }, "ports": { "open": [ 22, 80, 443 ] }, "dns_server": { "ns": [ { "ip": "108.162.192.164", "host": "ines.ns.cloudflare.com" }, { "ip": "108.162.193.181", "host": "jerome.ns.cloudflare.com" } ], "zone": "bosty.shop" }, "location": { "ip": "188.244.119.61", "asn": "199242", "org": "Malakmadze Web LLC", "country": "GE" }, "dns": { "A": [ "188.244.119.61" ], "NS": [ "ines.ns.cloudflare.com", "jerome.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"ines.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415767918, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "188.244.119.61", "family": 4 } } } ```