bitwiseinvest[.]biz

The domain bitwiseinvest.biz has been identified as a generic phishing threat, primarily targeting individuals with fake Forex and CFD trading services. This domain has been taken offline, mitigating its immediate threat potential. It was designed to impersonate legitimate investment platforms, deceiving users into disclosing sensitive financial information.

Analysis indicates that bitwiseinvest.biz was flagged by 11 of 95 security vendors on VirusTotal, suggesting a broad recognition of its malicious activity. The domain was registered through Dynadot LLC and resolved to IP address 107.173.193.235, hosted in the US under AS36352 (HostPapa). It appeared on one security blocklist and was specifically blocked by PhishDestroy. The SSL certificate was issued by Let's Encrypt, and the domain was created on February 11, 2025. Its strategic use of a realistic page title — 'Forex and CFD Trading with Cryptocurrency and Stock Trading Overview' — was likely intended to enhance its credibility.

Currently, bitwiseinvest.biz is offline, reducing its risk level. However, individuals and organizations should remain vigilant and employ measures such as enabling email filtering tools and educating users on identifying phishing techniques. Network administrators should review logs for any past connections to the suspicious IP address and consider blocking it to prevent future threats. Continuous monitoring of domain registries for similar phishing activities is recommended to preemptively identify and mitigate emerging threats.