# hanbitco.io — MALICIOUS

> hanbitco.io is under investigation for phishing risks. Users should exercise caution and avoid sharing sensitive info on this domain.

## Summary
PhishDestroy identifies hanbitco.io as an active domain linked to generic phishing, currently under investigation due to suspicious activity patterns.

Though VirusTotal shows zero detections, the domain’s recent creation date and registration through NICENIC INTERNATIONAL GROUP CO., LIMITED raise concerns. It resolves to IP 104.21.8.219, with no vendor flags yet but monitored for emerging threats.

Users are advised to avoid interacting with hanbitco.io or entering personal data. PhishDestroy continues to track this domain’s status and recommends vigilance as investigations proceed.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Ethereum
- Page title: Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | HANBITCO

## Domain Intelligence
- Registered: 2026-03-03 19:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.8.219
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: harley.ns.cloudflare.com tani.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Lionic", "SOCRadar", "Sophos", "URLQuery", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cb4b8-d312-74c1-9c40-907293ae35ea.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/5e524e58-3910-4681-a445-7b0d370c8c25
- PhishDestroy: https://phishdestroy.io/domain/hanbitco.io/
- LLM endpoint: https://phishdestroy.io/domain/hanbitco.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/hanbitco.io/
Last updated: 2026-03-19