boomx[.]io

This domain, boomx.io, is identified as a brand impersonation threat targeting entities associated with the term 'foundation.' Analysis of the site reveals an online casino theme, with the page title 'BOOMX | Play at the best online casino based on Blockchain,' suggesting an attempt to exploit trust in blockchain-related platforms or organizations. The domain does not appear to deploy a crypto drainer kit but instead relies on brand deception to lure victims into engaging with fraudulent gambling services. Infrastructure analysis reveals the domain was registered on February 06, 2025, through NameSilo, LLC, and resolves to the IP address 69.5.189.55. Detection metrics indicate significant malicious activity, with 14 out of 95 security vendors on VirusTotal flagging the domain as harmful. The domain appears on two security blocklists, including PhishDestroy and OISD, and has been assigned a trust score of 1/100 by both Scamadviser and Gridinsoft. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites due to its accessibility and cost-free nature. As of the latest assessment, boomx.io has been taken offline, reducing immediate exposure to potential victims. However, the domain's registration remains active, and the infrastructure could be repurposed for future malicious campaigns. Organizations and individuals are advised to monitor for similar impersonation attempts, particularly those leveraging blockchain or foundation-related branding. Blocklist integration and endpoint protection rules should be updated to include this domain and associated indicators to mitigate residual risk.