boomaviary[.]xyz

The domain boomaviary.xyz is a confirmed phishing site engaged in brand impersonation, specifically targeting Google as part of a shipping scam. This site was designed to deceive users into believing they were interacting with a legitimate Google service, potentially leading to credential theft or financial fraud. As of the latest verification, boomaviary.xyz has been taken offline, though it previously operated without a crypto drainer kit.

Technical indicators for boomaviary.xyz include 2 of 95 VirusTotal security vendors flagging the domain, including alphaMountain.ai and Forcepoint ThreatSeeker. The domain was registered through NameSilo, LLC on December 24, 2024, and resolved to the IP address 107.172.61.186, hosted by AS36352 HostPapa in the US. It appeared on 1 security blocklist, PhishDestroy, and had no SSL certificate, as reflected by the absence of an issuer. The observed page title was 'Welcome to | Parcel Sanctuary', and it was assigned a Gridinsoft trust score of 0/100 and a Scamadviser trust score of 17/100.

Users who may have interacted with boomaviary.xyz should immediately change any passwords entered on the site, particularly if they reused credentials across other platforms. Enabling two-factor authentication (2FA) on all accounts is strongly recommended to mitigate further risk. Victims should monitor their accounts for unauthorized activity and report the phishing domain to their email provider, browser vendor, and platforms like Google Safe Browsing or PhishTank. If financial information was shared, contact the relevant institution to secure the account and watch for fraudulent transactions.