# bexloritai.net — MALICIOUS

> Explore the current status of bexloritai.net, a domain flagged for social engineering. Learn about its risk and ongoing analysis at PhishDestroy.

## Summary
PhishDestroy has identified bexloritai.net as a potentially hazardous domain exhibiting characteristics consistent with generic phishing activity. Registered on January 07, 2026, the domain remains active and is currently classified under the 'under investigation' risk level due to limited threat intelligence available.

Technically, bexloritai.net resolves to the IP address 104.21.23.3 and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com. Although VirusTotal reports no detections from any of its 95 scanners, Google's Safe Browsing service has tagged the site for social engineering attempts, indicating possible deceptive tactics targeting users.

The domain's recent creation date and registrar choice add to the suspicions, warranting continuous monitoring. PhishDestroy advises caution and recommends that security teams keep an eye on any interactions involving this domain until further conclusive evidence emerges regarding its intent or malicious use.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-08 13:07:01
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 104.21.23.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["iris.ns.cloudflare.com", "jimmy.ns.cloudflare.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Lionic", "Netcraft", "SOCRadar", "Sophos", "VIPRE"]
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ccd4b-948b-76f9-8201-885f9ff84096.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/2459fca3-8491-4ccd-a19a-5abdc0a29247
- Wayback Machine: https://web.archive.org/web/https://bexloritai.net
- PhishDestroy: https://phishdestroy.io/domain/bexloritai.net/
- LLM endpoint: https://phishdestroy.io/domain/bexloritai.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/bexloritai.net/
Last updated: 2026-03-19