bboaoline[.]com

Analysis of bboaoline.com indicates a high-risk credential phishing domain registered on February 21, 2026, through Cosmotown, Inc. The domain remains active as of July 12, 2026, resolving to IP 198.251.89.220 (AS53667, US-based hosting). Infrastructure review shows the use of Leaflet, Bootstrap, LiteSpeed, Slick, OWL Carousel, and jQuery, alongside HTTP/3 support, suggesting a modern, interactive web presence designed to mimic legitimate login portals. The page title 'Personal' provides limited insight into the specific brand or service being impersonated, and no confirmed brand target is identified in available data. The domain is flagged by one security blocklist (PhishDestroy) and holds a Gridinsoft trust score of 0/100. SSL certification is provided by Let's Encrypt (R12), a common choice for both legitimate and malicious sites. While two of 93 security vendors on VirusTotal have flagged the domain, this detection rate alone does not confirm widespread recognition of the threat. The domain's nameservers (ns27.asurahosting.com, ns28.asurahosting.com) are consistent with low-cost hosting providers frequently used in phishing campaigns. Defenders should treat this domain as active and malicious, blocking resolution at the DNS level and monitoring for connections to 198.251.89.220. Further analysis of the site's content is required to determine the exact phishing kit or targeted brand, but the infrastructure and detection patterns align with credential harvesting operations. No evidence suggests this domain is benign or abandoned.