bitfiz[.]net

The domain bitfiz.net was a phishing site engaged in brand impersonation targeting users of the TON cryptocurrency platform. It presented itself as a legitimate crypto exchange under the name 'Bitfiz - Boost Your Decisions | Crypto Exchange' but was designed to deceive victims into disclosing credentials or transferring funds. No crypto drainer kit was detected. The site is currently taken offline, though its prior activity poses an elevated risk to those who interacted with it.

bitfiz.net was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar, and appeared on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. The domain was registered through Porkbun LLC on February 21, 2026, and resolved to the IP address 216.198.79.1, hosted on Amazon.com, Inc. (AS16509) in the US. The SSL certificate was issued by R13, and the site employed technologies such as Vercel and HSTS. Gridinsoft assigned it a trust score of 0/100, consistent with malicious activity. Nameservers included curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, and maceio.ns.porkbun.com.

Users who visited bitfiz.net should immediately change any credentials entered on the site, enable two-factor authentication on their TON or other crypto accounts, and monitor for unauthorized transactions. If funds were transferred, report the incident to the relevant cryptocurrency platform and local cybercrime authorities. To prevent further exposure, revoke any token approvals granted to unknown contracts and consider moving funds to a new wallet. Report the domain to additional blocklists or security vendors to aid in takedown efforts.