0xbsc[.]top

Analysis indicates that the domain 0xbsc.top was registered on February 21 2026 through the registrar 耐思尼克国际集团有限公司. The domain is hosted on Cloudflare infrastructure, resolving to IP 104.21.72.35 which belongs to AS13335 Cloudflare, Inc. in the United States. DNS resolution uses the Cloudflare name servers mack.ns.cloudflare.com and raquel.ns.cloudflare.com. An HTTPS endpoint presents a Google Trust Services / WE1 certificate and enforces HSTS, while the site also advertises Cloudflare Browser Insights and HTTP/3 support. HTTP requests receive a 301 redirect, and the only visible page title returned by the server is “522: Connection timed out”, suggesting that the backend service is currently unavailable or intentionally throttled.

Threat intelligence flags the domain as a high‑risk generic phishing operation employing an “Airdrop Scam” kit. The Gridinsoft trust score is 0 / 100, and VirusTotal reports that 16 of 91 security vendors have flagged the domain as malicious. The domain appears on three external blocklists and has been added to blocklists operated by PhishDestroy, MetaMask, and SEAL. AlienVault OTX references the domain in one pulse. The combination of a low trust score, multiple vendor detections, and inclusion on reputable blocklists supports a high confidence assessment of malicious intent.

While the HTTP status and SSL configuration are observable, the actual content served by the site has not been captured, and the “522: Connection timed out” title provides no direct insight into the phishing payload. Consequently, the precise lure and victim‑targeting mechanisms remain uncertain beyond the attribution to an airdrop‑related scam. Defenders should block or quarantine any traffic to 0xbsc.top, monitor DNS queries for the associated Cloudflare name servers, and update endpoint protection signatures with the observed VirusTotal detections.