Is bossayzxr.online safe?
http://bossayzxr.online/
Checked on
How we checked
Coverage: partial · 5 of 6 applicable core capabilities
- Antivirus (56 of 92 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
Brand-new domain masks a BUNGA65 gambling portal behind a cloned online-marketplace storefront and fake testimonials
bossayzxr.online is a two-day-old domain that dresses itself in a copied online-marketplace layout but actually promotes an Indonesian-language gambling service called BUNGA65. Its 'LOGIN' button and a series of navigation controls all lead to a separate domain, bossayzxr.pages.dev, rather than to any marketplace functionality. The copied branding and fabricated user reviews are aimed at lending false credibility to a gambling funnel with no disclosed operator, and combined with the site's total failure to provide a legitimate identity, this places it at a high risk for visitors.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 24/100
High Risk covers scores 21–44. 5 findings pulled the score down; 1 pushed it up.
What pulled the score down
- ModerateThe page adopts the 'EnvatoMarket' label and an Envato Elements subscription banner to present itself as a legitimate digital-asset marketplace, while its own heading and footer promote the BUNGA65 gambling brand instead.
- ModerateThe page displays templated testimonials from named individuals describing easy access to BUNGA65, which function as manufactured social proof for the gambling brand rather than genuine independent reviews.
- ModerateLogin, search, promotion, alternative-link, and live-chat controls all lead off-site to the separate gambling domain bossayzxr.pages.dev rather than to any functional marketplace.
- MinorThe registrable domain is only two days old at the time of analysis, so there is no established history or reputation behind it.
- MinorNo business registration, operator disclosure, or direct contact email is provided on the captured page, leaving no accountable entity behind the gambling promotion.
What pushed the score up
- SupportsThe browser threat feed returned no threat warning for the domain at the time of the check.
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor). Community reviews never change the Safety Score.
Lost money or shared details on bossayzxr.online? Do this now
Act quickly: the first hours matter most for a chargeback.
- Call your bank or card issuer now
Ask them to dispute the charge or open a chargeback; the sooner you act, the better your odds. Card payments can often be reversed. Bank transfers and gift cards are harder, but report them to your bank too. Crypto payments usually cannot be reversed: report the wallet address and transaction ID to the exchange you sent from.
- Change any password you entered
If you entered a password on bossayzxr.online, change it there and anywhere you reused it, and turn on two-factor authentication. Keep screenshots, order confirmations and messages as evidence.
- Report the site
Reports help get scam sites taken down faster and warn other people.
- Report the domain to its registrar
NameCheap, Inc. takes abuse reports at abuse@namecheap.com (+1.9854014545). Include the address and what happened.
- Ignore anyone offering to recover your money
"Recovery" services or agents who contact you, or ask for a fee up front, are almost always a second scam aimed at victims. Your bank's dispute process and the official reporting services never charge a fee in advance.
Full answers about refunds and reporting are in the Safety FAQ below.
01 · Investigation Brief
Investigation Brief
bossayzxr.online is a two-day-old domain that dresses itself in a copied online-marketplace layout but actually promotes an Indonesian-language gambling service called BUNGA65. Its 'LOGIN' button and a series of navigation controls all lead to a separate domain, bossayzxr.pages.dev, rather than to any marketplace functionality. The copied branding and fabricated user reviews are aimed at lending false credibility to a gambling funnel with no disclosed operator, and combined with the site's total failure to provide a legitimate identity, this places it at a high risk for visitors.
A copied marketplace facade hiding a gambling service
The page opens with the label 'EnvatoMarket' and carries a promotional line for 'Envato Elements,' including an invitation to subscribe to that unrelated subscription service. These elements replicate the look of a legitimate digital-asset marketplace, but the page's actual heading is 'Ulasan Pengguna: Link Alternatif dan Pusat Hiburan Masa Kini BUNGA65' — a gambling-focused alternative-link and entertainment hub in Indonesian. The footer confirms the site's true subject: 'BUNGA65: Link Alternatif Pusat Hiburan Masa Kini © COPYRIGHT 2026 BUNGA65.' There is no sign of the digital goods the cloned branding implies; the entire page exists to route visitors to the BUNGA65 gambling brand.
The copied marketplace aesthetic is a recognised deception tactic: it gives an unfamiliar, two-day-old domain a false air of legitimacy. The stated Envato Elements subscription link is the only outbound commercial relationship found, and it points to a real, unrelated company rather than to any genuine content on bossayzxr.online. Visitors lured by the familiar storefront design are funnelled instead toward a gambling operator with no verifiable identity.
Fabricated testimonials manufacture trust for the gambling funnel
The page displays a block of user testimonials attributed to named individuals such as 'Yanto Prasetyo,' each following a similar template: a short personal story about being a tour guide, a cake seller, or a gold-shop keeper who opened BUNGA65 on their phone during a break, found the access simple and the game display appealing, and appreciated the absence of strange pop-ups. The lines are repeated with only surface-level variations, which is consistent with the page manufacturing social proof rather than presenting genuine independent user feedback.
These fabricated reviews serve a specific deceptive purpose: they lend a human, reassuring quality to a brand-new site that otherwise has no track record. For visitors who rely on testimonials to judge whether an unfamiliar gambling site is trustworthy, the manufactured praise can be actively misleading. The page states no operator identity, no registration, and no direct contact email, so the reassuring reviews stand in place of any verifiable accountability.
Cross-domain controls route visitors off-site to the gambling portal
The page includes a 'LOGIN' button, a search box, and navigation items labelled 'Promo,' 'Link Alternatif' (alternative link), and 'Live Chat.' None of these controls serves on-site functionality; each one points off-domain to bossayzxr.pages.dev. The login button therefore does not open any local account or marketplace dashboard — it hands the visitor to a separate gambling destination. This is a deliberate cross-domain funnel design that keeps the reassuring facade on one host while the actual gambling interface lives on another.
The destination host, bossayzxr.pages.dev, shares the first part of the target domain name and receives the login, promotional, alternative-link, and live-chat traffic. The target site is served over plain HTTP with no redirect to HTTPS, even though a valid TLS certificate exists for the host, so the connection to the landing page itself is unencrypted. The combination of a sub-two-day domain age, an impersonated marketplace design, and a scripted off-domain gambling destination adds up to a deceptive operation with little protection for the visitor.
Why the score is 24
The page adopts the 'EnvatoMarket' label and an Envato Elements subscription banner to present itself as a legitimate digital-asset marketplace, while its own heading and footer promote the BUNGA65 gambling brand instead. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
0/ 92
No resultsSaved analysis from August 14, 2026 - stale
Analysis predates the current registration
The saved antivirus analysis is from August 14, 2026, which is before this domain's current registration, so it may describe an earlier owner. It is not counted as a clean result.
- Malicious
- 0
- Suspicious
- 0
- Total
- 92
All 92 engine results
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Unrated
- CINS Army - Clean
- Cluster25 - Unrated
- CRDF - Clean
- Criminal IP - Clean
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Unrated
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Unrated
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
BUNGA65: Link Alternatif Pusat Hiburan Masa Kini
What the captured page showed
1 observation- 01
BUNGA65: Link Alternatif Pusat Hiburan Masa Kini
What the page says about itself
What the site says about itself, quoted from the pages we read. The site wrote these words; they are not our findings.
- Page title
BUNGA65: Link Alternatif Pusat Hiburan Masa Kini
Pages we read
- Main page/Read
- Support / FAQ/item_support/what_is_item_support/8988002Could not be read
03 · Investigation Story
Investigation story
What the site claims
BUNGA65: Link Alternatif Pusat Hiburan Masa Kini
What we observed
The page content was captured and checked alongside 56 antivirus results.
What independent research found
The search completed without a material external warning or corroborating report.
What remains unverified
1 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Fake Shop & Commercial Deception
Service and business model
Gambling
Observed behavior
Evidence behind this classification
- 01The page adopts the 'EnvatoMarket' label and an Envato Elements subscription banner to present itself as a legitimate digital-asset marketplace, while its own heading and footer promote the BUNGA65 gambling brand instead.
- 02Login, search, promotion, alternative-link, and live-chat controls all lead off-site to the separate gambling domain bossayzxr.pages.dev rather than to any functional marketplace.
- 03The page displays templated testimonials from named individuals describing easy access to BUNGA65, which function as manufactured social proof for the gambling brand rather than genuine independent reviews.
Web research findings
Independent findings for bossayzxr.online, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
No independently sourced scam reports or credibility records were found for bossayzxr.online. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainbossayzxr.online
- Redirects tobossayzxr.online
- Hosted byCloudflare, Inc.
- Referencespublic-assets.envato-static.com · s3.envato.com
Domain Timeline
- Oct 28, 2026Domain registered
First appeared in WHOIS records — 2 days old when this review was saved.
- Oct 31, 2026Saved security review — Rated High Risk
The completed checks from this saved scan are detailed above.
bossayzxr.online was registered very recently when this review was saved and was already flagged. Freshly-registered domains are disproportionately used for scams, and a young domain with active threat signals warrants extra caution.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No direct contact email found on the captured page.
Domain & Encryption
Cloudflare DNS is used by legitimate and scam sites alike, so it does not identify who runs the site.
Report this domain to its registrar: send the address and what happened to this contact.
A certificate issued weeks or days before the scan on a domain registered recently is common on short-lived sites, though new legitimate sites look the same.
Certificate issued for bossayzxr.online.
A shared Cloudflare address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Analytics and ads
- Microsoft Advertising
- Cloudflare Web Analytics
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
No confirmed evidence in this dimension.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The page adopts the 'EnvatoMarket' label and an Envato Elements subscription banner to present itself as a legitimate digital-asset marketplace, while its own heading and footer promote the BUNGA65 gambling brand instead. · The page displays templated testimonials from named individuals describing easy access to BUNGA65, which function as manufactured social proof for the gambling brand rather than genuine independent reviews.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 0 of 92 engines flagged | Limited | No saved finding | stale fallback · analysed Aug 14, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 31, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 31, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 31, 2026 |
| Independent research | The search completed without a material external finding | Completed | No adverse finding | this scan · Oct 31, 2026 |
- Antivirus
- Result0 of 92 engines flagged
- CompletionLimitedFindingNo saved finding
- Freshnessstale fallback · analysed Aug 14, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 31, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 31, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 31, 2026
- Independent research
- ResultThe search completed without a material external finding
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 31, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is bossayzxr.online a scam or a legit online store?
Is bossayzxr.online safe to use?
What should I do if I already gave my details to bossayzxr.online?
Can I get my money back from bossayzxr.online?
I ordered from bossayzxr.online but nothing arrived — is it a fake shop?
How do I report bossayzxr.online?
Why does bossayzxr.online look legitimate if it's a scam?
Has bossayzxr.online been flagged by antivirus engines?
Is bossayzxr.online on any phishing or malware blacklists?
How old is the bossayzxr.online domain?
Does bossayzxr.online have a valid SSL certificate?
How often is the bossayzxr.online report updated?
08 · Final Verdict
Final verdict
Brand-new domain masks a BUNGA65 gambling portal behind a cloned online-marketplace storefront and fake testimonials
bossayzxr.online is a two-day-old domain that dresses itself in a copied online-marketplace layout but actually promotes an Indonesian-language gambling service called BUNGA65. Its 'LOGIN' button and a series of navigation controls all lead to a separate domain, bossayzxr.pages.dev, rather than to any marketplace functionality. The copied branding and fabricated user reviews are aimed at lending false credibility to a gambling funnel with no disclosed operator, and combined with the site's total failure to provide a legitimate identity, this places it at a high risk for visitors.
09 · Community
Community
Are you the owner of bossayzxr.online?Verify and reply