bit-rise-exchange[.]com

bit-rise-exchange.com was registered on July 02, 2025 through Ultahost, Inc. The domain resolves to 84.200.193.133, an address hosted in Germany and owned by UltaHost Inc. HTTP requests return status 200 and the page title is “Bit Rise”. The site presents a fabricated exchange interface, matching the “Fake Exchange” scam classification. Network analysis shows the host is served by Apache HTTP Server and styled with Tailwind CSS, indicating a modern but generic web stack. The TLS certificate is issued by Let’s Encrypt (R12), providing valid HTTPS without raising certificate anomalies. Reputation scoring from Gridinsoft is 0/100, reflecting a zero‑trust rating for the domain. The domain appears on one security blocklist and is actively blocked by PhishDestroy, confirming prior detection by phishing mitigation services. VirusTotal scans returned 5 positive detections out of 95 security vendors, reinforcing the malicious assessment. The nameserver configuration uses ns1‑ns4.ultahost.com, a typical pattern for domains registered with the same provider. Open questions remain regarding the specific credential harvesting mechanism and whether additional infrastructure is shared with other phishing sites. Defenders should block the domain at perimeter and proxy layers, monitor for outbound connections to 84.200.193.133, and enforce URL filtering policies that include the identified blocklist entries. Users should be warned that any login request to “Bit Rise” is fraudulent, and any credentials submitted should be considered compromised.