boamox[.]com

Analysis of boamox.com indicates an active phishing domain registered on July 28, 2026, through Fewmoretaps OU operating as Trustname.com. As of August 1, 2026, the domain remains operational and resolves to IP address 172.67.208.213, hosted on Cloudflare infrastructure with nameservers doug.ns.cloudflare.com and maisie.ns.cloudflare.com. The domain appears on one security blocklist, specifically PhishDestroy, though no additional public threat feeds currently list it. VirusTotal scans conducted by 91 vendors returned no detections; however, the absence of flags does not confirm legitimacy, particularly given the domain's recent creation and lack of historical reputation.

Infrastructure analysis reveals Cloudflare hosting, which is frequently utilized by threat actors to obscure origin servers and evade IP-based blocking. The registrar, Trustname.com, has been associated with other recently registered domains linked to phishing campaigns, though no direct attribution to a specific threat actor or group is established at this time. The exact content or targeted brand of the phishing site remains unconfirmed, as no page title, brand target, or scam type has been identified in available data. Defenders are advised to treat boamox.com as potentially malicious based on its registration timeline, hosting provider, and presence on a security blocklist.

Network-level blocking of the domain and its resolving IP (172.67.208.213) is recommended for organizations with phishing mitigation controls. Monitoring for additional detections or blocklist additions is warranted, as the domain may still be in the early stages of deployment. Further investigation into associated infrastructure, such as co-hosted domains or SSL certificate patterns, may provide additional context for attribution or campaign tracking.