fomo-voting-boz[.]netlify[.]app

This domain is flagged for brand impersonation under active investigation, specifically targeting investment scams. Analysis indicates the site mimics legitimate cryptocurrency trading platforms, presenting itself as a "Social Crypto Trading App & Web Platform" to deceive users into fraudulent financial transactions or credential harvesting.

Infrastructure analysis reveals the domain resolves to IP address 35.157.26.135 and is hosted on Netlify infrastructure. The SSL certificate is issued by DigiCert Inc, a common provider for both legitimate and malicious sites. As of the latest scan, VirusTotal reports 0/95 detections, indicating no antivirus engines have flagged the domain yet. No creation date or registration details beyond the Netlify platform were available, and the domain remains unlisted on major blocklists or threat intelligence feeds. The lack of detections does not confirm legitimacy, as brand impersonation domains often evade initial scans through dynamic content or delayed malicious payloads.

Mitigation steps for this threat type include immediate blocking of the domain and its resolving IP (35.157.26.135) at the network perimeter. Security teams should monitor for user interactions with the domain, particularly in financial or cryptocurrency-related contexts. Endpoint detection rules should be updated to flag any processes attempting to connect to fomo-voting-boz.netlify.app or its associated IP. Given the investment scam focus, financial institutions and crypto exchanges should issue internal alerts to customers about this impersonation attempt. If the domain is accessed, incident response should include isolating affected systems, revoking any exposed credentials, and analyzing logs for secondary infections or data exfiltration attempts.