# PhishDestroy domain threat record: botticellifoodsstore.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/botticellifoodsstore.shop/
Machine-readable companion: https://phishdestroy.io/domain/botticellifoodsstore.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-27 06:11:15 UTC
- Last availability or vendor check: 2026-10-28 00:30:09 UTC
- Stored record updated: 2026-10-28 00:30:09 UTC
- VirusTotal detections in the stored snapshot: 3/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 5.255.61.99
- Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND

## Evidence links

- URLScan report: https://urlscan.io/result/01a17bfa-5c82-75d4-b2d8-e24e4ff8d1d6/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/botticellifoodsstore.shop
- Certificate Transparency search: https://crt.sh/?q=%25.botticellifoodsstore.shop
- Web Archive lookup: https://web.archive.org/web/*/https://botticellifoodsstore.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed botticellifoodsstore.shop as a suspicious domain after automated analysis identified malicious and phishing labels from VirusTotal. The domain was first observed by PhishDestroy on 2026-10-27. On that date urlscan recorded HTTP 307 redirects between http and https for the site.

How the scam works
The detections suggest the site could be used for phishing or other malicious activities that aim to trick users into revealing credentials or personal data, but no specific malicious behavior was captured during the scan. The listing therefore reflects a risk category rather than confirmed exploitation.

Evidence
VirusTotal reported three detections from ninety‑two engines on 2026-10-27, labeling the domain malicious (CRDF), phishing (LevelBlue) and suspicious (Gridinsoft). Google Safe Browsing checked the same day and did not flag the site. urlscan.io captured the page on 2026-10-27; its engine verdict marked it malicious with a score of 74, while the overall verdict was non‑malicious, and it noted two 307 redirects. OTX listed four pulses referencing the domain as of 2026-10-27. PhishDestroy’s internal blocklist includes the domain, and external blocklists showed zero matches at the time of checking.

Infrastructure
The domain and its apex were recorded as 95 days old on 2026-10-27. DNS records listed an A record pointing to 5.255.61.99, belonging to ASN 199242 (Malakmadze Web LLC, Georgia), and authoritative name servers ns1.dyna-ns.net and ns2.dyna-ns.net with no DNSSEC signatures. The site presented a Let's Encrypt certificate issued on 2026-09-21 and expiring on 2026-12-20. Open ports observed during the scan were 22, 80, 443 and 8000.

What to do
Avoid entering credentials, personal data, or financial information on this site; if you have already done so, change any associated passwords and monitor accounts for unauthorized activity. Network defenders should block the exact domain name and review logs for connections to it. Continue to monitor reputable threat feeds for updates on this domain’s status.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17bfa-5c82-75d4-b2d8-e24e4ff8d1d6/
Cloudflare Radar report: https://radar.cloudflare.com/scan/0e076a06-8ebf-48e9-b92b-6b542c51d6a4
URLQuery report: https://urlquery.net/report/3702bc2a-2e82-43fb-b173-68d95959febd
Stored capture screenshot: https://i.ibb.co/qF3xTpxc/7cdb163c1751.png
Cloudflare Radar screenshot (2026-10-27T06:44:03Z): https://screenshots.phishdestroy.io/cf/0e076a06-8ebf-48e9-b92b-6b542c51d6a4.png
VirusTotal report: https://www.virustotal.com/gui/domain/botticellifoodsstore.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=botticellifoodsstore.shop
Archived copy: https://web.archive.org/web/20261027061339/https://botticellifoodsstore.shop/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 06:47:48 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/qF3xTpxc/7cdb163c1751.png
  Captured: 2026-10-27 06:11:15 UTC
- URLScan capture: https://urlscan.io/screenshots/01a17bfa-5c82-75d4-b2d8-e24e4ff8d1d6.png
  Captured: 2026-10-27 06:11:15 UTC
  Source report: https://urlscan.io/result/01a17bfa-5c82-75d4-b2d8-e24e4ff8d1d6/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0e076a06-8ebf-48e9-b92b-6b542c51d6a4.png
  Captured: 2026-10-27 06:44:03 UTC
  Source report: https://radar.cloudflare.com/scan/0e076a06-8ebf-48e9-b92b-6b542c51d6a4
  SHA-256: bcec777cabdd9e33b62415049c80abf1aa5b6a4d8249cd8c80e0ad4a9d11a35c
- URLQuery: https://screenshots.phishdestroy.io/uq/3702bc2a-2e82-43fb-b173-68d95959febd.png
  Source report: https://urlquery.net/report/3702bc2a-2e82-43fb-b173-68d95959febd
  SHA-256: 0d3673c44a284b183336596c83fcb3ff9e3ee9beda7d092292ccb7221d72df9b

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T06:24:31Z",
        "uuid": "01a17bfa-5c82-75d4-b2d8-e24e4ff8d1d6",
        "scanned_at": "2026-10-27T06:09:33Z",
        "final_url": "http://botticellifoodsstore.shop/",
        "redirects": [
            {
                "to": "https://botticellifoodsstore.shop/",
                "from": "http://botticellifoodsstore.shop/",
                "status": 307
            },
            {
                "to": "http://botticellifoodsstore.shop/",
                "from": "https://botticellifoodsstore.shop/",
                "status": 307
            }
        ],
        "globals": [
            "assert",
            "getRequiredElement",
            "P",
            "S",
            "getRandomNum",
            "getTimeStamp",
            "Dimensions",
            "Config$2",
            "getGlobalConfig",
            "setGlobalConfig",
            "Config$1",
            "Config",
            "setMaxGapCoefficient",
            "setMaxObstacleLength",
            "Status",
            "A11yStrings",
            "RunnerClasses",
            "RunnerSounds",
            "RunnerEvents",
            "updateCanvasScaling",
            "getA11yString",
            "vibrate",
            "createCanvas",
            "decodeBase64ToArrayBuffer",
            "createAdjustedCollisionBox",
            "drawCollisionBoxes",
            "boxCompare",
            "toggleHelpBox",
            "diagnoseErrors",
            "portalSignin",
            "updateForDnsProbe",
            "getMainFrameErrorCssClass",
            "getMainFrameErrorIconCssClass",
            "getSubFrameErrorIconCssClass",
            "shouldShowSuggestionsSummaryList",
            "getSuggestionsSummaryItemCssClass",
            "reloadButtonClick",
            "downloadButtonClick",
            "detailsButtonClick",
            "setAutoFetchState"
        ],
        "domain_age_days": 95,
        "apex_age_days": 95,
        "requests": 5,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 74,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T06:46:22Z",
        "uuid": "0e076a06-8ebf-48e9-b92b-6b542c51d6a4",
        "scanned_at": "2026-10-27T06:44:03Z",
        "final_url": "https://botticellifoodsstore.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://botticellifoodsstore.shop/",
                "status": 200
            }
        ],
        "dom_hash": "e54469c10af52f2bf13393cd46c1a37944d6a12ed68508396df8540364638c5a",
        "doc_hash": "c8db3ea0f51748a12c2714b301e0de327abedddf5b41c90cb75afd0e454ad468",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "botticellifoodsstore.shop",
                "type": "A",
                "value": "5.255.61.99"
            }
        ],
        "dnssec_valid": false,
        "ip": "5.255.61.99"
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T06:43:06Z",
        "analysis_at": "2026-10-27T06:31:05Z",
        "stats": {
            "timeout": 0,
            "harmless": 53,
            "malicious": 2,
            "suspicious": 1,
            "undetected": 36
        },
        "detections": {
            "CRDF": "malicious",
            "LevelBlue": "phishing",
            "Gridinsoft": "suspicious"
        },
        "reputation": 0,
        "first_seen": "2026-07-24T00:16:04Z",
        "dns": [
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "5.255.61.99"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.botticellifoodsstore.shop",
                "value": "ns1.dyna-ns.net"
            }
        ],
        "dns_at": "2026-10-27T06:37:32Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "botticellifoodsstore.shop"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "5c05c3e58740f3d78974590714edb11ea64",
            "sha256": "cda7f774f8da94aeafa75d83ec0b63a3637e3bfbb5d81474e03af50be119519c",
            "subject": "botticellifoodsstore.shop",
            "valid_to": "2026-12-20T18:48:43Z",
            "valid_from": "2026-09-21T18:48:44Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T06:45:33Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "botticellifoodsstore.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-27T06:13:39Z",
            "first": "2026-10-27T06:13:39Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 54481
        },
        "trackers": {
            "requests": 44,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443,
                8000
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.26.92",
                    "host": "ns1.dyna-ns.net"
                },
                {
                    "ip": "162.159.25.5",
                    "host": "ns2.dyna-ns.net"
                }
            ],
            "zone": "botticellifoodsstore.shop"
        },
        "location": {
            "ip": "5.255.61.99",
            "asn": "199242",
            "org": "Malakmadze Web LLC",
            "country": "GE"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "botticellifoodsstore.shop"
        },
        "dns": {
            "A": [
                "5.255.61.99"
            ],
            "NS": [
                "ns2.dyna-ns.net",
                "ns1.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.botticellifoodsstore.shop\", \"serial\": 2026072302, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "get_ip": {
            "ip": "5.255.61.99",
            "family": 4
        }
    }
}
```