# PhishDestroy domain threat record: bottesanfibioco.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/bottesanfibioco.shop/
Machine-readable companion: https://phishdestroy.io/domain/bottesanfibioco.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-27 06:10:44 UTC
- Last availability or vendor check: 2026-10-28 00:30:11 UTC
- Stored record updated: 2026-10-28 00:30:11 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 162.222.90.56
- Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-04-26 22:00:00 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17bfa-064a-7144-95ac-522f6c361ad0/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/bottesanfibioco.shop
- Certificate Transparency search: https://crt.sh/?q=%25.bottesanfibioco.shop
- Web Archive lookup: https://web.archive.org/web/*/https://bottesanfibioco.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s automated intake flagged the site as malicious because it impersonates the Anfibio brand, advertises 65 % off winter boots on a generic shop template, and uses the unrelated domain bottesanfibioco.shop. The page excerpt captured on 2026-10-27 shows a banner for “Bottes d'hiver … -65%” and a product listing for a Nomad Backpack. PhishDestroy first observed the domain on 2026-10-27, receiving an HTTP 200 response after a 307 redirect from http to https.

How the scam works
Fake‑store impersonation typically involves registering a look‑alike or unrelated domain, deploying a ready‑made e‑commerce template, and advertising heavily discounted goods to lure shoppers. Victims are prompted to submit personal or payment details, which can be harvested for fraud or resale.

Evidence
VirusTotal scanned the domain on 2026-10-27 with 92 engines and reported 0 malicious and 0 suspicious detections. Google Safe Browsing checked the same day and did not flag the site. urlscan.io captured the page on 2026-10-27 and returned a malicious verdict with a score of 100, categorising it as phishing and labeling it a fake shop. PhishDestroy’s internal blocklist marks the domain as malicious, external blocklists showed no entries, and OTX listed four pulses referencing the domain.

Infrastructure
The domain was registered on 2026-04-27 and is 182 days old, using Cloudflare nameservers bradley.ns.cloudflare.com and lana.ns.cloudflare.com. The recorded IP is 162.222.90.56, belonging to ASN 199242 (Malakmadze Web LLC, Georgia), and the site presented a Let’s Encrypt certificate issued on 2026-10-24 and valid until 2027-01-22; the tech stack includes Node.js, React and Next.js with typical e‑commerce components.

What to do
Visitors should avoid providing any personal, payment, or login information on this site and monitor financial accounts for unauthorized activity; if credentials were entered, change the associated passwords immediately. Defenders can block bottesanfibioco.shop at the DNS or proxy level, add the IP 162.222.90.56 to deny‑lists, and review server logs for requests to this domain.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17bfa-064a-7144-95ac-522f6c361ad0/
Cloudflare Radar report: https://radar.cloudflare.com/scan/9f4f2449-2d07-4f89-acc4-c57594158800
URLQuery report: https://urlquery.net/report/c1225f2a-26c7-432b-bb0a-7ab1d1c9dc02
Stored capture screenshot: https://i.ibb.co/yrY8sP1/b09fb337a8d9.png
Cloudflare Radar screenshot (2026-10-27T06:44:06Z): https://screenshots.phishdestroy.io/cf/9f4f2449-2d07-4f89-acc4-c57594158800.png
VirusTotal report: https://www.virustotal.com/gui/domain/bottesanfibioco.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bottesanfibioco.shop
Archived copy: https://web.archive.org/web/20261027061119/https://bottesanfibioco.shop/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 06:47:19 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/yrY8sP1/b09fb337a8d9.png
  Captured: 2026-10-27 06:10:44 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a17bfa-064a-7144-95ac-522f6c361ad0.png
  Captured: 2026-10-27 06:10:44 UTC
  Source report: https://urlscan.io/result/01a17bfa-064a-7144-95ac-522f6c361ad0/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/9f4f2449-2d07-4f89-acc4-c57594158800.png
  Captured: 2026-10-27 06:44:06 UTC
  Source report: https://radar.cloudflare.com/scan/9f4f2449-2d07-4f89-acc4-c57594158800
  SHA-256: 75346d66047cacaeabd2373c2e38e35df5de865d84bbb21fa8075781e5bd0af5
- URLQuery: https://screenshots.phishdestroy.io/uq/c1225f2a-26c7-432b-bb0a-7ab1d1c9dc02.png
  Source report: https://urlquery.net/report/c1225f2a-26c7-432b-bb0a-7ab1d1c9dc02
  SHA-256: 925fb21d6b622be05f0ee3cc21aae15c23c3352b0c5daa95b4dbac2d27e38200

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T06:24:32Z",
        "uuid": "01a17bfa-064a-7144-95ac-522f6c361ad0",
        "scanned_at": "2026-10-27T06:09:14Z",
        "final_url": "https://bottesanfibioco.shop/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://bottesanfibioco.shop/",
                "from": "http://bottesanfibioco.shop/",
                "status": 307
            }
        ],
        "ip": "162.222.90.56",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.250.154.94",
            "142.251.20.95",
            "162.222.90.56"
        ],
        "asns": [
            "15169",
            "199242"
        ],
        "countries": [
            "US",
            "GE"
        ],
        "doc_hash": "04d05978fdb111358073ab0524e5c1fafc0826615c206987618416b8bd8a4747",
        "script_hashes": [
            "7b7064487d9e49bda3b45855b6dbceeb3f17d94f311da2c689309f6b73078118",
            "da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f",
            "56bef185cd5d43be7d55db75e9756858e8a4093525595194b8d3202210013efe",
            "2d9ed79eb6d7a824a49129543fe8712e46fdc8f048e145692492d81f589f33b5",
            "5790cd3ddf6d13150fad9403a3be5269f8bb5c8905966746bca6929477b611e0",
            "9de785ee19ccdf688f837e8bf8d2bbdb4c1dabc04b8ee7166bc1f4057226e49d",
            "91eb4c6e12d5d0f37080b53c6a8b513c579db4854839928eb478164ef6dc1d65",
            "acfed8ce931532ba4fbcdbc534468ab16b1e4ab08c8f8b9859558b9fbfc86d3e",
            "54674023c15e7c7d2c117eacd9399f7e7ff4a224093be6fbd07fba4480b882ba",
            "5594b2dc49c9ed560d32392288f138c9e3f4cccd2c8c71d305060cf653ce80c2"
        ],
        "globals": [
            "__next_f",
            "webpackChunk_N_E",
            "next",
            "_N_E_STYLE_LOAD",
            "Prism"
        ],
        "cookies": [
            "_rre_cid",
            "_rre_pv",
            "_rre_rg",
            "_rre_rid",
            "_site_domain"
        ],
        "storage_keys": [
            "analytics_session_id",
            "analytics_session_id_ts",
            "__analytics_utm__",
            "analytics_visitor_id"
        ],
        "domain_age_days": 182,
        "apex_age_days": 182,
        "tls_age_days": 2,
        "tls_valid_days": 89,
        "requests": 60,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 93,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "fakeshop"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Fake Shop"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "content-type": "image/png"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T06:46:22Z",
        "uuid": "9f4f2449-2d07-4f89-acc4-c57594158800",
        "scanned_at": "2026-10-27T06:44:06Z",
        "final_url": "https://bottesanfibioco.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://bottesanfibioco.shop/",
                "status": 200
            }
        ],
        "dom_hash": "b5cd13128cdd16ba7da9222c8907ecb88b1ac2e75af90655c30e2db2b2411097",
        "doc_hash": "aadf9d89b5756f0ceb0e8d28ae05b02e631edfc167e30a6c73ecf4f49fb39bbd",
        "domain_risks": [
            "Clothing",
            "Society & Lifestyle",
            "Ecommerce",
            "Shopping & Auctions"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "bottesanfibioco.shop",
                "type": "A",
                "value": "162.222.90.56"
            }
        ],
        "dnssec_valid": false,
        "ip": "162.222.90.56"
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T06:43:06Z",
        "analysis_at": "2026-10-27T06:30:57Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "created": "2026-04-27T00:00:00Z",
        "updated": "2026-04-27T00:00:00Z",
        "first_seen": "2026-04-27T19:24:08Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "lana.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "bradley.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "bradley.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "162.222.90.56"
            }
        ],
        "dns_at": "2026-10-27T06:37:47Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "bottesanfibioco.shop"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "5816320269ef0a72a0d19f7f809756bf26c",
            "sha256": "0c9f2e4960f778bc4a6f91d01c3c329a25dde736617b93f6a409b6ea4907e214",
            "subject": "bottesanfibioco.shop",
            "valid_to": "2027-01-22T12:36:38Z",
            "valid_from": "2026-10-24T12:36:39Z"
        },
        "whois": []
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T06:45:43Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "bottesanfibioco.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-27T06:11:19Z",
            "first": "2026-10-27T06:11:19Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 68789
        },
        "trackers": {
            "requests": 44,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443,
                8000
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.195.35",
                    "host": "bradley.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.192.182",
                    "host": "lana.ns.cloudflare.com"
                }
            ],
            "zone": "bottesanfibioco.shop"
        },
        "location": {
            "ip": "162.222.90.56",
            "asn": "199242",
            "org": "Malakmadze Web LLC",
            "country": "GE"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "bottesanfibioco.shop"
        },
        "dns": {
            "A": [
                "162.222.90.56"
            ],
            "NS": [
                "bradley.ns.cloudflare.com",
                "lana.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"bradley.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418126732, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "get_ip": {
            "ip": "162.222.90.56",
            "family": 4
        },
        "tech_stack": {
            "technologies": [
                "Cart Functionality",
                "Node.js",
                "React",
                "Next.js",
                "Priority Hints",
                "Google Font API",
                "Webpack",
                "Prism",
                "Open Graph",
                "Module Federation",
                "HTTP/3"
            ]
        }
    }
}
```