bomawin[.]com

The domain bomawin.com is identified as a generic phishing domain. It does not appear to target a specific brand or use a known drainer kit. The domain's primary threat is its potential to deceive users and harvest sensitive information.

Infrastructure analysis reveals that bomawin.com resolves to the IP address 104.21.14.81. The domain is registered through Fewmoretaps OU d/b/a Trustname.com and was created on July 03, 2026. According to VirusTotal, 12 out of 95 security vendors flag this domain as malicious. The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to unsuspecting users. The domain appears on 2 security blocklists, indicating some level of recognition of its malicious nature.

The domain is currently active, and response actions should include monitoring for any changes in its infrastructure and content. Organizations should block this domain at the network level to prevent user access. Despite the blocklists and vendor flags, the elevated risk level suggests that the domain may still pose a threat to users who are not adequately protected. Continuous monitoring and user education on phishing threats are recommended to mitigate the remaining risk.