bozei[.]bond

On July 24, 2026, the domain bozei.bond was observed to be offline but remains listed in multiple threat intelligence sources. The domain was registered on January 07, 2026 through Gname.com Pte. Ltd. and is hosted on the Cloudflare network (AS13335) with the resolved address 188.114.96.3 located in the United States. DNS resolution points to the authoritative nameservers crystal.ns.cloudflare.com and leo.ns.cloudflare.com, indicating the use of Cloudflare’s DNS services. The site presented the page title “Bozei: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrencies | Gold | Oil”, suggesting an investment‑oriented lure. The SSL certificate was issued by Google Trust Services under the WE1 certificate authority, providing a valid TLS handshake but not mitigating the malicious intent.

Threat intelligence records show the domain appearing in three security blocklists and being explicitly blocked by PhishDestroy, MetaMask, and SEAL. Two of ninety‑one VirusTotal scanners flagged the domain, and AlienVault OTX references it in two independent pulses. Gridinsoft assigned a trust score of 0 out of 100, reflecting an extreme lack of reputation. No additional behavioral data or payload analysis is available, and the site’s content has not been captured for further forensic examination.

Defenders should add bozei.bond to inbound and outbound filtering rules, enforce DNS sinkholing for the associated IP address, and monitor for any future re‑registration attempts. Given the Cloudflare hosting, any resurgence may involve the same address range, so broader ASN‑level blocking may be considered. Continuous review of blocklist updates and OTX feeds is recommended to capture any new indicators related to this infrastructure. Until the domain is permanently taken down, organizations should treat any traffic to the domain as malicious and quarantine related alerts.