bopx88[.]com

Analysis indicates that bopx88.com was registered on March 11 2026 through Hello Internet Corp and is currently taken offline. The domain resolves to the Cloudflare IP 188.114.96.3, which belongs to AS13335 in the United States. DNS is served by rohin.ns.cloudflare.com and savanna.ns.cloudflare.com, both Cloudflare name servers. The site presented the page title “Daftar • BOP X 88”, suggesting a registration‑oriented page, but no further content has been captured.

An SSL certificate issued by Let’s Encrypt (profile E8) was active, confirming the use of standard HTTPS encryption. The domain appears on a single external blocklist and has been flagged by PhishDestroy, indicating that at least one security community has taken mitigation steps. AlienVault OTX records the domain in one threat‑intel pulse, providing additional corroboration of malicious intent. VirusTotal reported that one of ninety‑four scanning engines flagged the domain, while Gridinsoft assigned a trust score of zero out of one hundred, reflecting a high confidence of abuse.

Despite these indicators, the limited detection footprint—only one blocklist entry and a single vendor flag—leaves the full scope of the phishing campaign uncertain. Defenders should continue to block the domain at perimeter filters, add the IP 188.114.96.3 to deny‑list rules, and monitor for any resurgence of activity. Because the site is already offline, ongoing observation of related indicators such as the Let’s Encrypt certificate fingerprint, the Cloudflare name servers, and the “Daftar • BOP X 88” title can aid in early detection of re‑hosted copies or derivative domains. Organizations employing URL filtering, DNS sinkholing, or threat‑intel feeds should ensure that bopx88.com and its associated IP are included in their deny lists, and analysts should watch for future OTX or blocklist updates that may expand the observed infrastructure.