bxnvest[.]com

This domain, bxnvest.com, is flagged as a generic phishing site targeting users of financial trading services, including forex, stocks, ETFs, binary options, and cryptocurrency platforms. Analysis indicates the domain mimics legitimate investment brokers to deceive victims into disclosing credentials or transferring funds. No specific brand impersonation or drainer kit signatures were identified, but the site’s structure and advertised services align with known fraudulent trading schemes. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 213.165.249.109 and was registered on April 25, 2025, through GMO Internet, Inc. It is detected by 1 out of 95 security vendors on VirusTotal, appears on one security blocklist, and has trust scores of 0/100 (Gridinsoft) and 1/100 (Scamadviser). The site employs Nginx and OpenResty technologies, which are commonly used in both legitimate and malicious web infrastructures. No Google Safe Browsing (GSB) status is available, but the domain’s rapid appearance on blocklists suggests proactive detection by security providers. As of the latest assessment, bxnvest.com is offline, reducing immediate risk to end users. However, the domain’s recent registration and use of bulletproof hosting infrastructure indicate potential for re-emergence. Organizations and individuals are advised to block the domain and associated IP at the network level, monitor for related phishing campaigns, and educate users about fraudulent trading platforms. Remaining risk is classified as elevated due to the domain’s technical setup and historical association with financial scams.