bazienfj5285328[.]xyz
“Bazienfejar (بازی انفجار وی آی پی) - بهترین سایت بازی انفجار آنلاین”
bazienfj5285328.xyz — Belum terverifikasi. Ringkasan bukti: VirusTotal 3/95 (Fortinet, Gridinsoft, SOCRadar); Spamhaus DBL_PHISH; PhishDestroy score 65/100. Registrar: NiceNIC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis as of July 24, 2026 indicates that bazienfj5285328.xyz is a confirmed phishing infrastructure. The domain was registered on February 22, 2026 through NiceNIC International Group Co., Limited and resolves to the Cloudflare‑owned address 104.21.81.137, which is associated with AS13335 in the United States. No TLS certificate is presented for the site, meaning HTTPS connections are not secured. The sole page title retrieved from the site reads “Bazienfejar (بازی انفجار وی آی پی) - بهترین سایت بازی انفجار آنلاین”, suggesting the content is presented in Persian and appears to target users interested in online gaming.
The domain is listed on a single security blocklist and has been actively blocked by PhishDestroy. VirusTotal analysis shows that three of ninety‑five scanning engines flagged the domain, providing additional corroboration of malicious intent. The domain’s nameservers are fred.ns.cloudflare.com and gabriella.ns.cloudflare.com, confirming that the DNS is hosted by Cloudflare. At the time of reporting the site is offline, which may be the result of takedown actions or temporary hosting issues.
Defenders should add bazienfj5285328.xyz to network‑level deny lists and ensure that the associated IP address 104.21.81.137 is monitored for any resurgence of malicious activity. Because the site uses Cloudflare’s infrastructure, any future re‑hosting could appear under the same IP range, so broader IP reputation controls for the AS13335 block are advisable. Continuous monitoring of the registrar NiceNIC International Group and periodic re‑scanning of the domain for new content are recommended to capture any re‑activation attempts. Until the domain is definitively removed from the threat landscape, it should be treated as a high‑confidence phishing indicator.
Intelijen Keamanan Jaringan Registrar context
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-19 02:53:25 UTC
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
PD-20260222-B94436 Recipient: abuse@nicenic.net, abuse@gen.xyz, compliance@icann.org Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive