boucharaofficial[.]com

This domain, boucharaofficial.com, is a confirmed credential theft operation impersonating the legitimate retailer Bouchara. The site presents a fabricated 'Spring Sale: up to 80% off sitewide' promotion to lure victims into entering login credentials, payment details, or personal information under the guise of a discounted purchase. Analysis of the page structure and detected technologies indicates the use of tracking pixels and marketing automation tools to harvest submitted data for subsequent fraud or account takeover attempts. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on June 03, 2026, through West263 International Limited, a registrar frequently associated with fraudulent sites. It resolves to IP address 104.18.26.78 and is currently offline, though it was flagged by 4 out of 95 security vendors on VirusTotal prior to takedown. The domain appears on one security blocklist, and its SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. Additional technical artifacts include the use of Alibaba Cloud Object Storage Service for hosting malicious assets and Mautic for tracking victim interactions. Users who visited boucharaofficial.com should immediately reset any credentials entered on the site, particularly if reused across other platforms. Monitor financial statements for unauthorized transactions, as payment details may have been compromised. If browser sessions were active during the visit, clear cached data and run a full antivirus scan to detect potential malware or tracking scripts. Report the incident to relevant fraud prevention services and consider enabling multi-factor authentication on all critical accounts to mitigate further risk.