bozeji[.]com

This domain, bozeji.com, is flagged as an active investment scam based on observable infrastructure and threat intelligence data. Registered on March 27, 2026, through Gname.com Pte. Ltd., the domain resolves to 104.21.9.223, hosted on Cloudflare’s network (AS13335). The site presents itself as a global investment platform, as indicated by its page title: 'Bozei: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrencies | Gold | Oil.' The use of Cloudflare nameservers (crystal.ns.cloudflare.com and leo.ns.cloudflare.com) and technologies such as Vue.js, HSTS, and HTTP/3 aligns with common phishing infrastructure patterns, though these alone do not confirm malicious intent. Analysis reveals the domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and is referenced in two AlienVault OTX threat intelligence pulses. A single security vendor on VirusTotal has flagged the domain, though this does not provide conclusive evidence of widespread detection. The SSL certificate, issued by Google Trust Services (WE1), is valid and does not indicate compromise. The domain’s Gridinsoft trust score of 0/100 further supports its classification as high-risk. Defenders should treat this domain as actively malicious, particularly given its explicit categorization as an investment scam. Network-level blocking is recommended, and any associated accounts or transactions should be investigated for fraudulent activity. The domain’s recent registration and use of Cloudflare’s infrastructure suggest an attempt to evade detection, though no direct evidence of a specific phishing kit or brand impersonation is currently available. Further analysis of the site’s content and backend behavior is advised to confirm the exact nature of the scam.