Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
bito[.]xin
“Bozei: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrenc…”
संग्रहीत अवलोकन
देखा गया शीर्षक अंतर
साक्ष्य सारांश
Analysis of bito.xin, created on 2026-01-04 and hosted behind Cloudflare (AS13335) in the United States, shows a pattern consistent with an investment-scam operation. The domain resolves to 172.67.170.185 and uses Cloudflare’s DNS service (crystal.ns.cloudflare.com, leo.ns.cloudflare.com). The TLS certificate is issued by Google Trust Services under the WE1 root, indicating a valid HTTPS connection despite the malicious intent. HTTP requests return a 403 status code, suggesting the site is currently inaccessible, which aligns with the reported offline status. The page title returned by the server, “Bozei: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrencies | Gold | Oil”, explicitly advertises a broad financial‑services offering and matches the classified scam type of an investment scam.
The front-end stack includes Vue.js, HSTS, Cloudflare Browser Insights, and HTTP/3, all typical of modern web applications but not indicative of benign purpose. Reputation data is uniformly negative. Gridinsoft assigns a trust score of 0 / 100, and the domain appears on three known security blocklists. It is also listed by PhishDestroy, MetaMask, and SEAL as a blocked resource. AlienVault OTX references the domain in one threat‑intel pulse, and VirusTotal records a single positive detection out of 91 scanning engines, confirming that at least one vendor flagged the site as malicious.
The registrar, Gname.com Pte. Ltd., is a known bulk‑registration service often used by threat actors. Defenders should continue to block bito.xin at network perimeter and DNS layers, monitor for any re‑activation attempts, and add the associated IP address 172.67.170.185 to deny-list rules. Because the site is currently offline, threat actors may attempt to resurrect the domain or use similar naming conventions; therefore, security tools should be tuned to detect the combination of the page title keywords and the Cloudflare hosting profile.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260623-E4DFB6- कैप्चर किए गए पेज का शीर्षक
- Bozei: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrencies | Gold | Oil
- PDF दस्तावेज़
- PDF प्रमाण
प्रमाण का पूरा पाठ
Policy Violations: Illegal Activities section forbids phishing, fraud, fake sites, malware distribution; registrar investigates and may suspend or delete domain
Applicable Laws: Computer Misuse Act 1993 §§3+, Penal Code §§415–420 (cheating), Online Criminal Harms Act (OCHA)
Data Coverage
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 11/08/2026
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें
5 उच्च-विश्वसनीयता वाली तकनीकें पहचानी गईं
वायरसटोटल विश्लेषण
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।