fomo-wave[.]xyz

The domain fomo-wave.xyz was registered on July 26, 2026 through Name.com, Inc. and is currently resolved to the IPv4 address 63.176.8.218. Its authoritative name servers are dns1.p07.nsone.net, dns2.p07.nsone.net, dns3.p07.nsone.net, and dns4.p07.nsone.net. As of the report date, August 03, 2026, the domain remains active and is listed on two security blocklists. In addition, it is explicitly blocked by the PhishDestroy and ScamSniffer filtering services.

VirusTotal analysis shows that three of ninety‑one scanning engines have flagged the domain as malicious, indicating a low but non‑zero consensus among automated scanners. AlienVault OTX has recorded a single threat‑intel pulse that references fomo-wave.xyz, further corroborating its association with malicious activity. No public information is available regarding SSL configuration, HTTP response codes, Safe Browsing status, page title, or the specific content hosted at the address, leaving the precise phishing payload and targeted brand unverified. The limited detection footprint—three vendor flags and two blocklist entries—suggests the site may be newly deployed or employing evasion techniques, but the presence on multiple reputable blocklists and the OTX pulse confirms a high‑risk classification.

Defenders should immediately add fomo-wave.xyz to DNS and URL filtering policies, enforce network‑level blocking of its IP address, and monitor for any related domains that share the same name‑server set or IP range. Continuous re‑scanning with multi‑engine services is advised to capture any changes in payload or detection rates. Organizations using threat‑intel feeds should also ingest the OTX pulse to propagate alerts across their security stack.