bitfinexinvest[.]co

This domain, bitfinexinvest.co, is currently active and has been classified as a generic phishing site. The registration record shows the domain was created on 2023-01-02 through Name.com, Inc., and its authoritative name servers are ns1.bluehost.com and ns2.bluehost.com. DNS resolution points to the IPv4 address 162.241.230.57. VirusTotal reports that five of ninety‑one scanned security vendors have flagged the domain, indicating a modest detection rate among scanners. The domain appears on a single public security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its malicious reputation.

No additional public intelligence such as Safe Browsing or OTX entries is provided in the source data. Infrastructure analysis suggests the hosting provider is likely Bluehost, given the use of its name servers, but the specific hosting environment for the IP address is not detailed. The limited number of vendor detections and the single blocklist entry may reflect a relatively recent or low‑profile deployment, yet the presence of any detections confirms that security products have identified malicious behavior associated with the domain. The exact content served by the site, including page title or any SSL certificate details, has not been disclosed, leaving the precise phishing lure and target audience uncertain.

Defenders should prioritize blocking traffic to 162.241.230.57 and adding bitfinexinvest.co to local deny lists. Monitoring for new detections from additional vendors or inclusion on further blocklists is advised, as the threat may evolve. Organizations that handle credentials related to financial services should be alerted to the possibility of credential‑harvesting attempts originating from this domain. Continuous observation of the domain’s DNS records and any changes to its hosting configuration is recommended to detect potential escalation.