bozei[.]icu

Analysis indicates that bozei.icu is an active high-risk domain associated with an investment scam. Registered on February 24, 2026, through Gname.com Pte. Ltd., the domain currently resolves to 104.21.28.241, hosted on Cloudflare's infrastructure (AS13335). The page title explicitly advertises a 'One-Stop Global Investment Platform' covering forex, commodities, stocks, indices, cryptocurrencies, gold, and oil, aligning with the classified scam type of fraudulent investment schemes. The domain appears on three security blocklists and is actively blocked by multiple detection systems. SSL certification is provided by Let's Encrypt, a common choice for both legitimate and malicious sites, offering no inherent trust signal. Infrastructure analysis reveals Cloudflare nameservers (crystal.ns.cloudflare.com and leo.ns.cloudflare.com), which are frequently used to obscure hosting origins and evade takedowns. At the time of assessment, the domain returns an HTTP 200 status, confirming operational status. Defenders should note that while only two of ninety-one security vendors flagged this domain on a recent scan, this limited detection does not indicate safety. The domain has also been documented in one threat intelligence pulse, suggesting prior malicious activity recognition. Given the combination of investment-themed branding, recent registration, Cloudflare hosting, and blocklist presence, this domain exhibits multiple indicators of fraudulent intent. Organizations are advised to treat bozei.icu as malicious, implement blocking at the network level, and monitor for related domains registered through the same registrar or resolving to identical infrastructure.