# PhishDestroy domain threat record: bzpxon.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/bzpxon.com/
Machine-readable companion: https://phishdestroy.io/domain/bzpxon.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 20:16:07 UTC
- Last availability or vendor check: 2026-10-23 22:00:31 UTC
- Stored record updated: 2026-10-23 22:30:38 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 34.8.229.132
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date (registry RDAP, bzpxon.com): 2025-04-23 01:26:45 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1239f-7cce-74dc-b973-68033545be06/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/bzpxon.com
- Certificate Transparency search: https://crt.sh/?q=%25.bzpxon.com
- Web Archive lookup: https://web.archive.org/web/*/https://bzpxon.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added bzpxon.com to its internal blocklist on 2026-10-23 as a suspicious domain based on aggregated security signals. The site returned HTTP 200 for the root URL on the same day, but no page title was recorded.

How the scam works
The domain is flagged because many anti‑malware engines label it as phishing or malware, which is typical of sites that may host deceptive content or drive‑by downloads. No specific malicious behavior was observed in the captured page snapshot.

Evidence
VirusTotal scanned the domain on 2026-10-20 and reported 17 detections from 92 engines, with 15 malicious and 2 suspicious labels. Google Safe Browsing checked on 2026-10-23 and did not flag the domain. URLScan captured a snapshot on 2026-10-10 and returned a clean overall verdict with a neutral score. OTX listed two pulses referencing bzpxon.com as of 2026-10-23. PhishDestroy’s internal list includes the domain, while external blocklists checked on 2026-10-23 showed zero matches. Cloudflare Radar independently marked the domain as malware, reflecting its own assessment.

Infrastructure
The domain was registered on 2025-04-23 through Dynadot Inc and uses the nameservers ns1.dyna-ns.net and ns2.dyna-ns.net. DNS resolution on 2026-10-20 returned an A record pointing to 34.8.229.132, an address owned by Google LLC in the United States. A Let’s Encrypt certificate issued on 2026-07-24 was valid until 2026-10-22.

What to do
Avoid entering credentials or downloading files from bzpxon.com. If any personal data was submitted, change the associated passwords and monitor accounts for unusual activity. Defenders should block the exact domain (bzpxon.com) at the network perimeter and review logs for connections to the recorded IP address.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1239f-7cce-74dc-b973-68033545be06/
Cloudflare Radar report: https://radar.cloudflare.com/scan/5ef58f4a-07da-4469-9ae5-32f69e97f690
Stored capture screenshot: https://urlscan.io/screenshots/01a1239f-7cce-74dc-b973-68033545be06.png
Cloudflare Radar screenshot (2026-10-23T20:16:47Z): https://screenshots.phishdestroy.io/cf/5ef58f4a-07da-4469-9ae5-32f69e97f690.png
VirusTotal report: https://www.virustotal.com/gui/domain/bzpxon.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bzpxon.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 20:47:19 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a1239f-7cce-74dc-b973-68033545be06.png
  Captured: 2026-10-23 20:16:07 UTC
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/5ef58f4a-07da-4469-9ae5-32f69e97f690.png
  Captured: 2026-10-23 20:16:47 UTC
  Source report: https://radar.cloudflare.com/scan/5ef58f4a-07da-4469-9ae5-32f69e97f690
  SHA-256: a5db7ab655d3900bfb2bf44f8483ca7ce06fc6f795376f14b777be50f1f0af62

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T20:17:23Z",
        "uuid": "01a1239f-7cce-74dc-b973-68033545be06",
        "scanned_at": "2026-10-10T02:23:42Z",
        "final_url": "https://www.bzpxon.com/",
        "globals": [
            "assert",
            "getRequiredElement",
            "P",
            "S",
            "getRandomNum",
            "getTimeStamp",
            "Dimensions",
            "Config$2",
            "getGlobalConfig",
            "setGlobalConfig",
            "Config$1",
            "Config",
            "setMaxGapCoefficient",
            "setMaxObstacleLength",
            "Status",
            "A11yStrings",
            "RunnerClasses",
            "RunnerSounds",
            "RunnerEvents",
            "updateCanvasScaling",
            "getA11yString",
            "vibrate",
            "createCanvas",
            "decodeBase64ToArrayBuffer",
            "createAdjustedCollisionBox",
            "drawCollisionBoxes",
            "boxCompare",
            "toggleHelpBox",
            "diagnoseErrors",
            "portalSignin",
            "updateForDnsProbe",
            "getMainFrameErrorCssClass",
            "getMainFrameErrorIconCssClass",
            "getSubFrameErrorIconCssClass",
            "shouldShowSuggestionsSummaryList",
            "getSuggestionsSummaryItemCssClass",
            "reloadButtonClick",
            "downloadButtonClick",
            "detailsButtonClick",
            "setAutoFetchState"
        ],
        "domain_age_days": 534,
        "apex_age_days": 1333,
        "requests": 5,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": -46,
                "malicious": false
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T20:17:24Z",
        "uuid": "5ef58f4a-07da-4469-9ae5-32f69e97f690",
        "scanned_at": "2026-10-23T20:16:47Z",
        "final_url": "https://bzpxon.com/",
        "history": [
            {
                "url": "https://bzpxon.com/",
                "status": 0
            }
        ],
        "dom_hash": "94bfc7c24186e5b245b5675859fb84b248547086370961e5637590177432b219",
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "bzpxon.com",
                "type": "A",
                "value": "34.8.229.132"
            }
        ],
        "dnssec_valid": false,
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2025-04-23T01:26:45Z",
            "updated": "2026-06-02T01:28:04Z",
            "expires": "2027-04-23T01:26:45Z",
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T20:46:35Z",
        "analysis_at": "2026-10-20T00:09:10Z",
        "stats": {
            "timeout": 0,
            "harmless": 43,
            "malicious": 15,
            "suspicious": 2,
            "undetected": 32
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "phishing",
            "VIPRE": "malware",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "malware",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "categories": {
            "alphaMountain.ai": "Phishing, Pornography (alphaMountain.ai)"
        },
        "created": "2025-04-23T00:00:00Z",
        "updated": "2026-04-23T00:00:00Z",
        "first_seen": "2024-08-19T10:44:02Z",
        "dns": [
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.bzpxon.com",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "34.8.229.132"
            }
        ],
        "dns_at": "2026-10-20T00:09:23Z",
        "jarm": "29d3fd00029d29d00042d43d00041d6f940079659edb62e1c38c38bd26ee84",
        "cert": {
            "san": [
                "bzpxon.com"
            ],
            "issuer": "Let's Encrypt / YR2",
            "serial": "63c357208cbfd7144821426b5c51e94c6e4",
            "sha256": "fe94b81f3f0fe4106315acf1074672c0dbf977cf20f3678058c4c92a6725b61c",
            "subject": "bzpxon.com",
            "valid_to": "2026-10-22T06:30:06Z",
            "valid_from": "2026-07-24T06:30:07Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-04-23T01:26:45Z",
                "last changed": "2026-07-24T06:23:16Z",
                "registration": "2025-04-23T01:26:45Z",
                "registrar expiration": "2027-04-23T01:26:45Z",
                "last update of RDAP database": "2026-10-16T07:01:26Z"
            },
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T20:17:44Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "bzpxon.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-16T05:22:18Z",
            "first": "2025-07-10T23:32:07Z",
            "changes": 2,
            "days_archived": 3,
            "scans_per_day": 0,
            "avg_page_bytes": 8970
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.27.158",
                    "host": "ns1.dyna-ns.net"
                },
                {
                    "ip": "162.159.24.5",
                    "host": "ns2.dyna-ns.net"
                }
            ],
            "zone": "bzpxon.com"
        },
        "location": {
            "ip": "34.8.229.132",
            "asn": "396982",
            "org": "Google LLC",
            "city": "Kansas City",
            "country": "US"
        },
        "dns": {
            "A": [
                "34.8.229.132"
            ],
            "NS": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.bzpxon.com\", \"serial\": 2026072301, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "get_ip": {
            "ip": "34.8.229.132",
            "family": 4
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2025-04-23T01:26:45Z",
            "updated": "2026-06-02T01:28:04Z",
            "expires": "2027-04-23T01:26:45Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        }
    }
}
```