dockflare-filebrowser[.]boiz[.]nyc

Analysis indicates that dockflare-filebrowser.boiz.nyc was registered through NameCheap, Inc. on 31 October 2025 and points to the IP address 198.54.117.242, which belongs to AS22612 NameCheap, Inc. in the United States. The domain resolves to a server that presents no TLS certificate, meaning all HTTP traffic would be unencrypted. The authoritative nameservers listed are failed-whois-verification.namecheap.com and verify-contact-details.namecheap.com, both of which are owned by Namecheap and suggest intentional alignment with the targeted brand. The page title returned from the host is “dockflare-filebrowser.boiz.nyc - ICANN Verification Needed | Namecheap.com”, explicitly invoking the Namecheap brand and the ICANN verification phrasing, a common lure in credential‑phishing campaigns. The threat is classified as credential phishing and the brand target is Namecheap, confirming a brand‑impersonation motive.

Detection telemetry shows the domain appears on a single security blocklist and is actively blocked by the PhishDestroy service. Gridinsoft assigns a trust score of 0 out of 100, indicating a high confidence of malicious intent. VirusTotal analysis reports that 2 of 95 scanning engines flagged the domain, reinforcing the suspicion despite the low overall detection count. The site’s current status is offline, which limits direct observation of the payload, but the existing metadata is sufficient to warrant defensive action.

Defenders should add dockflare-filebrowser.boiz.nyc and its resolving IP 198.54.117.242 to network deny lists and configure web filtering to block any HTTP request to the domain. Monitoring of the associated nameservers and registrar activity is advisable, as similar domains may be registered using the same naming pattern.