bxpro[.]cloud

Analysis of the domain www.bxpro.cloud indicates it operated as a phishing site targeting users of online gaming platforms. The domain was registered on March 11, 2026, through HOSTINGER operations, UAB, and was taken offline by July 24, 2026. Infrastructure analysis reveals the site resolved to the IP address 188.114.97.3, hosted under AS13335 (Cloudflare, Inc.) in the United States. Nameservers were configured as kallie.ns.cloudflare.com and ruben.ns.cloudflare.com, consistent with Cloudflare-protected infrastructure. No SSL certificate was detected, increasing the risk of interception or manipulation of user data.

The page title, 'BETXPRO - Platform Gaming,' suggests the site masqueraded as a legitimate gaming or betting platform. Technologies identified on the domain include Node.js, Express, jsDelivr, HSTS, and HTTP/3, which are commonly used in both legitimate and malicious sites to enhance performance and security. The domain appeared on one security blocklist and was flagged by PhishDestroy. VirusTotal data shows that 2 out of 94 security vendors classified this domain as malicious, though the specific nature of the threat (e.g., credential harvesting, malware distribution) is not confirmed from the available evidence. Defenders should treat this domain as a confirmed phishing threat, particularly for users of gaming or betting services.

While the site is currently offline, the infrastructure may be repurposed or reactivated. Organizations are advised to block the domain and its associated IP address (188.114.97.3) at the network level. Monitoring for similar domains registered through HOSTINGER or utilizing Cloudflare nameservers may help identify related threats. Further investigation into the hosting provider and registrar could reveal additional linked infrastructure or threat actor patterns.