bopela[.]ae

The domain bopela.ae was registered through Worldhost.group on 25 February 2026 and is hosted on the AS212660 WHG Hosting Services Ltd network in the United Arab Emirates, resolving to the IPv4 address 198.38.94.17. A Let's Encrypt R12 certificate secures the site, indicating the use of automated certificate issuance. Technical fingerprinting shows the web server runs LiteSpeed and serves client‑side libraries including jQuery and Slick, while HTTP/3 is enabled, suggesting a relatively recent deployment. The page title returned by the server reads “www.bopela.ae – The Turnkey Contractors”, but no further content analysis is available.

VirusTotal recorded a single positive detection out of 93 scanning engines, confirming that at least one security product identified malicious behavior. The domain is listed on two public blocklists and has been actively blocked by the PhishDestroy and ScamSniffer filtering services, reinforcing the classification as a phishing infrastructure. Nameserver records point to ns1.bdm.microsoftonline.com, ns2.bdm.microsoftonline.com, and ns3.bdm.microsoftonline.com, which are atypical for the hosting provider and may indicate an attempt to obscure ownership.

The site is currently offline, limiting immediate threat exposure, but the observed infrastructure components—short registration age, single detection, use of a reputable CDN‑like certificate authority, and presence on multiple blocklists—suggest a purposeful, albeit brief, phishing campaign targeting users who might be lured by the “Turnkey Contractors” branding. Defenders should continue to monitor the IP address 198.38.94.17 for any re‑activation, enforce outbound filtering for the domain and its associated hostnames, and consider adding the domain to internal blocklists.