bitpax-web3network[.]online

Analysis of bitpax-web3network.online shows a confirmed wallet/seed phishing operation. The domain resolves to 163.61.188.5, an address located in the United States and assigned to AS153568 NEW DHAKA HARDWARE. Registration data indicates the domain was created on August 10, 2025 through Global Domain Group LLC, and it is secured with a Let’s Encrypt R13 certificate. HTTP probing returned a 200 status code and the page title "Home - Bitpax-Web3Network - A crypto buy and sell marketplace" suggests the site was positioned as a cryptocurrency trading platform, a common lure for credential harvesting. Technical fingerprinting identified a WordPress stack backed by MySQL and PHP, with front‑end components including Bootstrap, LiteSpeed, OWL Carousel, jQuery and jQuery Migrate.

The domain is listed on four security blocklists and is actively blocked by PhishDestroy, Polkadot, Enkrypt and Codeesura, confirming its malicious reputation. Trust metrics are extremely low, with Scamadviser scoring 29 / 100 and Gridinsoft reporting 0 / 100. VirusTotal analysis recorded a single vendor detection, reinforcing the suspicion of malicious intent. MX records point to the same domain (priority 0), indicating potential use for phishing email delivery.

Nameservers are hosted on dns1‑4.lytehosting.com, a configuration often observed in disposable or compromised hosting environments. While the site is currently offline, historical evidence confirms it operated as a wallet/seed phishing front. Defenders should immediately block the domain and its associated IP address, monitor for any resurgence, and advise users to avoid any interactions with URLs or emails referencing bitpax-web3network.online. Further investigation of the underlying hosting provider and any related domains is recommended to disrupt the broader phishing infrastructure.