cboefewq[.]com

Analysis as of July 23, 2026 indicates that the domain cboefewq.com was registered on February 21, 2026 through Gname.com Pte. Ltd. and is hosted on Cloudflare infrastructure (nameservers henry.ns.cloudflare.com, sandra.ns.cloudflare.com). DNS resolution points to IP 172.67.167.40, which belongs to AS13335 Cloudflare, Inc., and is geolocated in the United States. The site presents a TLS certificate issued by Google Trust Services under the WE1 profile, confirming the use of a valid HTTPS connection. Automated scans show the page title “Cboe”, while Google Safe Browsing classifies the domain as a social‑engineering threat.

VirusTotal has recorded detections from 10 of 93 scanned security vendors, reinforcing the malicious assessment. The domain is currently offline, but it was previously identified by multiple blocklist operators, including PhishDestroy, MetaMask, and SEAL, and appears on three additional security blocklists. The threat category is brand impersonation targeting UPS, as indicated by the intelligence feed. Technology fingerprints reveal Cloudflare’s HTTP/3 support, consistent with the hosting environment.

No public content analysis is available, and the exact phishing landing page has not been captured, leaving the specific tactics and credential‑harvesting mechanisms uncertain. Defenders should continue to block the domain and its associated IP address, update network and email filters to include the reported blocklists, and monitor for any re‑registration attempts. Threat‑intel sharing platforms should be notified using the observed indicators of compromise, and any future traffic to the domain should be redirected to a sinkhole for further investigation.