boboupdate[.]live

This domain, boboupdate.live, is presently classified as a high‑risk credential‑phishing site. The risk rating reflects multiple independent detections and the fact that defensive products have already taken blocking action against it.

Infrastructure analysis reveals that the domain was created on April 04 2026 and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. Authoritative name servers are chan.ns.cloudflare.com and kobe.ns.cloudflare.com, indicating that the site is served via a Cloudflare edge network. The presence of HTTP Strict Transport Security, Cloudflare Browser Insights, and HTTP/3 support demonstrates a modern CDN configuration. Access to the root URL returns an HTTP 403 status, and the only page title observed is “Just a moment…”, which aligns with Cloudflare’s default challenge response.

Threat‑intel evidence confirms malicious use. VirusTotal records three of ninety‑five scanning engines flagging the domain. AlienVault OTX includes boboupdate.live in eight separate threat pulses, and the domain is actively blocked by PhishDestroy. It also appears on one public blocklist, and Gridinsoft assigns a trust score of 0 / 100, underscoring the malicious assessment. No additional content analysis beyond the observed title is currently available.

Defenders should treat boboupdate.live as a confirmed credential‑phishing indicator. Recommended actions include adding the domain to network and email filtering rules, updating intrusion‑prevention signatures, and monitoring for any outbound connections to the identified Cloudflare name servers. Continuous monitoring of threat‑intel feeds is advised to capture any new observations, and any credentials suspected of being exposed should be rotated without delay.