classes[.]bohobeautiful[.]app

The domain classes.bohobeautiful.app was registered through GoDaddy.com, LLC on May 17, 2026 and remains active. DNS resolution points to IP address 34.120.223.236, a Google Cloud host located in the United States. Nameservers ns65.domaincontrol.com and ns66.domaincontrol.com are in use, consistent with the registrar. The site presents the page title "Boho Beautiful Official" and serves an SSL certificate issued by Google Trust Services (WR3), indicating HTTPS encryption is enabled. Infrastructure analysis shows a Gridinsoft trust score of 1/100, reflecting a very low reputation, and the domain is listed on one security blocklist. PhishDestroy has already blocked the domain, and VirusTotal reports that six of ninety‑two scanners flagged it as malicious. The observed evidence aligns with a brand‑impersonation campaign targeting the Boho Beautiful brand. While the exact content of the landing page has not been examined, the combination of recent registration, low trust score, blocklist presence, and multiple vendor detections suggests a high‑risk phishing operation. Defenders should continue to block the domain at network perimeters, monitor DNS queries for the associated IP and nameservers, and consider adding the domain to internal blacklists. Ongoing observation is advised to detect any changes in hosting or content that could affect mitigation strategies.