baoziinnlondon[.]com

Analysis indicates that baoziinnlondon.com is currently active and has been classified as a high‑risk generic phishing infrastructure. The domain was created on 25 April 2012 and is registered through GoDaddy. DNS resolution points to IP 92.243.74.3, which belongs to Cloudflare (AS209242, Cloudflare London, LLC) and is hosted in Cambodia (KH). The domain uses Cloudflare’s services, including HTTP/3, and presents a TLS certificate issued by Google Trust Services under the WE1 certificate authority. An HTTP 301 redirect is observed, and the page title returned is “TOTO80 - Link Toto Slot 777 Terpercaya Hari ini & Gampang Menang, Official.” The site has been blocked by PhishDestroy, receives a Gridinsoft trust score of 0 / 100, and one of ninety‑five VirusTotal scanners flags it. It also appears on a security blocklist. These indicators collectively suggest malicious intent consistent with generic phishing. However, the specific payload, credential‑stealing mechanisms, or target victim profile have not been publicly disclosed, leaving the exact phishing tactic uncertain. Defenders should block the domain at the network perimeter, add the IP address 92.243.74.3 to deny lists, monitor DNS queries for the associated Cloudflare nameservers, and continue to watch for any changes in the site’s content or additional detections. Ongoing verification with threat‑intel feeds is recommended to confirm the persistence of the threat.