bx4395[.]com

The domain bx4395.com is currently flagged as a high-risk entity associated with generic phishing threats. The domain was created on April 6, 2026, and is actively resolving to the IP address 172.67.134.125. It uses an SSL certificate issued by Let's Encrypt, which is a common practice among various malicious actors aiming to appear legitimate. The domain has registered a Gridinsoft trust score of 0/100, indicating a high level of distrust. Additionally, it has been identified on one security blocklist and is actively blocked by PhishDestroy, which adds to the evidence of its malicious intent.

Analysis of threat intelligence reveals that bx4395.com appears in four threat intelligence pulses on AlienVault OTX, signifying its recognition within the cybersecurity community as a potential threat. VirusTotal analysis shows that 17 out of 95 security vendors have flagged this domain, reinforcing its classification as dangerous. The page title 'welcome！' lacks specific branding cues, making it unclear what entity it impersonates, but its low trust score and negative flags suggest it could be aimed at phishing attacks.

The presence of technologies such as HSTS, Cloudflare Browser Insights, and HTTP/3 indicates that the domain is leveraging modern web technologies to enhance user experience and potentially evade detection. Defenders should remain vigilant and monitor for any domain usage that mimics legitimate services. Given its current active status and the evidence from various intelligence sources, it is prudent to implement additional filtering measures for this domain and related infrastructure to mitigate potential phishing risks.