bos786[.]net

This domain, bos786.net, is flagged as a high-risk phishing endpoint targeting users through a generic phishing kit. Registered on April 24, 2026, through NameCheap, Inc., the domain remains active as of July 12, 2026, with no SSL certificate implemented, increasing exposure to interception risks. Infrastructure analysis reveals the domain resolves to the IP address 162.255.119.228, hosted by a US-based provider under Web-hosting.com, and utilizes nameservers dns1.registrar-servers.com and dns2.registrar-servers.com, a configuration consistent with low-cost, disposable hosting often exploited for malicious campaigns. Analysis indicates the domain appears on one security blocklist and has been included in a single AlienVault OTX threat intelligence pulse, suggesting limited but confirmed detection. Only one out of ninety-five security vendors on VirusTotal currently flags bos786.net, which may reflect either early-stage detection or evasion tactics. The domain returns an HTTP 200 status, indicating an operational web server, though the absence of SSL further suggests a lack of encryption, a common characteristic in phishing infrastructure designed to reduce costs and avoid certificate transparency logs. What remains uncertain is the specific brand or entity being impersonated, as no conclusive evidence links bos786.net to a particular phishing kit or targeted organization. The domain’s recent registration and minimal detection footprint may indicate an emerging threat or a test phase before broader deployment. Defenders should treat this domain as active and high-risk, particularly in environments where user credentials or sensitive data are processed. Network-level blocking is recommended, along with monitoring for connections to 162.255.119.228 and associated nameserver traffic. Given the domain’s persistence and operational status, further investigation into related infrastructure is warranted to identify potential lateral movement or secondary payload delivery.