thomasmisch[.]shop

The domain thomasmisch.shop is flagged for brand impersonation targeting Stripe. The domain was registered on July 01, 2025, through West263 International Limited, a registrar known for being used by various malicious actors. Analysis indicates that the domain has been taken offline as of July 23, 2026, which may suggest that the site was shut down due to security concerns or defensive actions. The page title, 'Thomas Misch - Fiorucci Official Online Store | Shop Now,' does not directly match the brand target, which could indicate a multi-brand impersonation attempt or a change in the attacker’s strategy.

The domain resolves to an IP address (188.114.96.3) located in the United States, and is hosted by Cloudflare, Inc. (AS13335). However, the domain lacks an SSL certificate, which is a common indicator of a phishing site, as legitimate e-commerce sites typically use SSL to secure transactions. The Gridinsoft trust score for this domain is 0/100, indicating a high level of suspicion. The domain is also blocked by PhishDestroy and appears on one security blocklist, further confirming its malicious nature.

Additionally, the domain has been referenced in 15 threat intelligence pulses on AlienVault OTX, suggesting it has been associated with multiple security incidents. Despite the domain being offline, defenders should remain vigilant as the infrastructure and techniques used may reappear in future attacks. It is recommended to monitor for any resurgence of this domain and to educate users about the risks of visiting unsecured websites and verifying the legitimacy of e-commerce sites before making transactions.