bozei[.]biz

This domain, bozei.biz, is actively flagged as a high-risk investment scam phishing site targeting financial markets, including forex, commodities, stocks, indices, cryptocurrencies, gold, and oil, as indicated by its page title. Registered on March 16, 2026, through Gname.com Pte. Ltd., the domain resolves to IP address 104.21.42.21 and is protected by Cloudflare, which may obscure its origin and hosting details. Infrastructure analysis reveals the use of Vue.js, HSTS, and HTTP/3, alongside Cloudflare Browser Insights, suggesting a modern, potentially obfuscated web stack designed to evade detection. The domain appears on four security blocklists, including SEAL, MetaMask, PhishDestroy, and BLP-Malware, and is referenced in 16 threat intelligence pulses on AlienVault OTX, reinforcing its classification as malicious. While no detections are currently reported by scanning vendors, this absence does not confirm safety, particularly given the domain's recent registration and active blocklist presence. Defenders should treat this domain as hostile and prioritize blocking it at the network and endpoint levels, particularly in environments where financial or investment-related activity occurs. Monitoring for related domains registered through the same registrar or resolving to the same IP may uncover additional threats in this campaign. The exact content and operational mechanics of the site remain unanalyzed, but its infrastructure and blocklist status justify immediate containment.