# PhishDestroy domain threat record: hashbitx.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/hashbitx.com/
Machine-readable companion: https://phishdestroy.io/domain/hashbitx.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 09:00:53 UTC
- Last availability or vendor check: 2026-10-25 12:23:06 UTC
- Stored record updated: 2026-10-25 12:23:06 UTC
- VirusTotal detections in the stored snapshot: 2/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 82.26.146.108
- Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-22 14:13:00 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17249-a9b5-737b-b49a-dd4e948325cc/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/hashbitx.com
- Certificate Transparency search: https://crt.sh/?q=%25.hashbitx.com
- Web Archive lookup: https://web.archive.org/web/*/https://hashbitx.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI assessment classified the site as malicious because it promotes cryptocurrency trading and a stablecoin yield of up to 12 % APY, a pattern common in fraudulent investment schemes. The domain was first seen by PhishDestroy on 2026-10-25, three days after registration, and an HTTP 200 response was recorded at that time. The recorded page title reads “HASHBITX: Spot crypto trading and stablecoin yield” and the excerpt advertises “Spot‑Handel auf 60 Top‑Kryptomärkten … Stablecoin‑Rendite bis zu 12 % APY.”

How the scam works
Fraudulent crypto‑investment schemes lure victims with promises of unusually high returns on stablecoins or other assets, then request deposits or wallet approvals that can be drained later. Victims are enticed by the appearance of a legitimate trading platform and the advertised APY, but the offers are typically unsupported and designed to steal funds.

Evidence
VirusTotal scanned the domain on 2026-10-25 and reported two detections out of 92 engines, labeling it as spam by Fortinet and phishing by SOCRadar. Google Safe Browsing checked the same day and returned no flag. OTX listed four pulses as of 2026-10-25. No external blocklists reported the domain on that date, while PhishDestroy’s internal blocklist includes it. urlscan captured the site on 2026-10-25; its engine verdict marked the page malicious with a score of 50, though the overall score was 0.

Infrastructure
The domain was registered with NICENIC INTERNATIONAL GROUP CO., LIMITED on 2026-10-22 and expires on 2027-10-22; its nameservers are ns3.my-ndns.com and ns4.my-ndns.com. DNS resolution on 2026-10-25 returned the IP 82.26.146.108, hosted by Level 3 Communications (ASN 3356) and recorded in Frankfurt, Germany. The site used a Let’s Encrypt certificate valid from 2026-10-23 to 2027-01-21 and had ports 22, 80 and 443 open.

What to do
Do not enter credentials, private keys or funds on this site. Add hashbitx.com to web‑filtering and intrusion‑detection rules and monitor outbound traffic to its IP address. Review access logs for any connections on or after 2026-10-25 and treat any interaction as potentially compromised.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17249-a9b5-737b-b49a-dd4e948325cc/
Cloudflare Radar report: https://radar.cloudflare.com/scan/8f910b6d-5f76-4673-bc87-9721ecfce801
Stored capture screenshot: https://i.ibb.co/VcprZ58h/c17cda4ab1f6.png
Cloudflare Radar screenshot (2026-10-25T09:38:29Z): https://screenshots.phishdestroy.io/cf/8f910b6d-5f76-4673-bc87-9721ecfce801.png
URLScan screenshot (2026-10-25T08:56:25Z): https://screenshots.phishdestroy.io/us/01a17245-e737-7366-9635-e298ed1a07a2.png
URLScan capture report: https://urlscan.io/result/01a17245-e737-7366-9635-e298ed1a07a2/
VirusTotal report: https://www.virustotal.com/gui/domain/hashbitx.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=hashbitx.com
Archived copy: https://web.archive.org/web/20261025090353/https://hashbitx.com/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 10:49:10 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/VcprZ58h/c17cda4ab1f6.png
  Captured: 2026-10-25 09:00:53 UTC
- URLScan capture: https://urlscan.io/screenshots/01a17249-a9b5-737b-b49a-dd4e948325cc.png
  Captured: 2026-10-25 09:00:53 UTC
  Source report: https://urlscan.io/result/01a17249-a9b5-737b-b49a-dd4e948325cc/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8f910b6d-5f76-4673-bc87-9721ecfce801.png
  Captured: 2026-10-25 09:38:29 UTC
  Source report: https://radar.cloudflare.com/scan/8f910b6d-5f76-4673-bc87-9721ecfce801
  SHA-256: 6e8b05e10fbb1ede8983c679721bae92b2cbd3b9d3f8f3f2e2fe8a121f75c999
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17245-e737-7366-9635-e298ed1a07a2.png
  Captured: 2026-10-25 08:56:25 UTC
  Source report: https://urlscan.io/result/01a17245-e737-7366-9635-e298ed1a07a2/
  SHA-256: 4d0eec5af8ea72e358bd01105af1919836514fc9ecbde5da6dfa9b19a56c77a9

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T09:16:32Z",
        "uuid": "01a17249-a9b5-737b-b49a-dd4e948325cc",
        "scanned_at": "2026-10-25T08:59:59Z",
        "final_url": "https://hashbitx.com/",
        "doc_hash": "04d05978fdb111358073ab0524e5c1fafc0826615c206987618416b8bd8a4747",
        "globals": [
            "assert",
            "getRequiredElement",
            "P",
            "S",
            "getRandomNum",
            "getTimeStamp",
            "Dimensions",
            "Config$2",
            "getGlobalConfig",
            "setGlobalConfig",
            "Config$1",
            "Config",
            "setMaxGapCoefficient",
            "setMaxObstacleLength",
            "Status",
            "A11yStrings",
            "RunnerClasses",
            "RunnerSounds",
            "RunnerEvents",
            "updateCanvasScaling",
            "getA11yString",
            "vibrate",
            "createCanvas",
            "decodeBase64ToArrayBuffer",
            "createAdjustedCollisionBox",
            "drawCollisionBoxes",
            "boxCompare",
            "toggleHelpBox",
            "diagnoseErrors",
            "portalSignin",
            "updateForDnsProbe",
            "getMainFrameErrorCssClass",
            "getMainFrameErrorIconCssClass",
            "getSubFrameErrorIconCssClass",
            "shouldShowSuggestionsSummaryList",
            "getSuggestionsSummaryItemCssClass",
            "reloadButtonClick",
            "downloadButtonClick",
            "detailsButtonClick",
            "setAutoFetchState"
        ],
        "domain_age_days": 1,
        "apex_age_days": 1,
        "requests": 8,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 50,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "image/png"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T09:41:05Z",
        "uuid": "8f910b6d-5f76-4673-bc87-9721ecfce801",
        "scanned_at": "2026-10-25T09:38:29Z",
        "final_url": "https://hashbitx.com/",
        "status": 200,
        "history": [
            {
                "url": "https://hashbitx.com/",
                "status": 200
            }
        ],
        "dom_hash": "08c58efbf08d67398f0d041da98937ad07d0ea02452522ed2992d3cc498e54cc",
        "doc_hash": "9ce3ce733f92edee8a206d9845f2ee2a00e43b8f08268186c215780cce8e112c",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "hashbitx.com",
                "type": "A",
                "value": "82.26.146.108"
            }
        ],
        "dnssec_valid": false,
        "ip": "82.26.146.108",
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-10-22T16:13:00Z",
            "updated": "2026-10-22T16:13:00Z",
            "expires": "2027-10-22T16:13:00Z",
            "nameservers": [
                "ns3.my-ndns.com",
                "ns4.my-ndns.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T10:42:58Z",
        "analysis_at": "2026-10-25T09:21:12Z",
        "stats": {
            "timeout": 0,
            "harmless": 53,
            "malicious": 1,
            "suspicious": 1,
            "undetected": 37
        },
        "detections": {
            "Fortinet": "spam",
            "SOCRadar": "phishing"
        },
        "reputation": 0,
        "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
        "created": "2026-10-22T16:13:00Z",
        "expires": "2027-10-22T16:13:00Z",
        "updated": "2026-10-22T16:13:00Z",
        "first_seen": "2026-10-23T14:52:47Z",
        "dns": [
            {
                "ttl": 7200,
                "type": "SOA",
                "rname": "root.hashbitx.com",
                "value": "hashbitx.com"
            },
            {
                "ttl": 7200,
                "type": "NS",
                "value": "ns3.my-ndns.com"
            },
            {
                "ttl": 7200,
                "type": "NS",
                "value": "ns4.my-ndns.com"
            },
            {
                "ttl": 6295,
                "type": "A",
                "value": "82.26.146.108"
            }
        ],
        "dns_at": "2026-10-25T09:26:33Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "hashbitx.com"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "624e9c8ad7d83cb08f3ebacb08a9773fb69",
            "sha256": "a1739f0704bf6f8d444327e0a7fe121e1751bb58f963ec84d58bbf78b0a0b2fe",
            "subject": "hashbitx.com",
            "valid_to": "2027-01-21T12:06:29Z",
            "valid_from": "2026-10-23T12:06:30Z"
        },
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "registrar_iana_id": "3765",
            "registrar_url": "https://nicenic.com",
            "created": "2026-10-22T16:13:00Z",
            "updated": "2026-10-22T16:13:00Z",
            "expires": "2027-10-22T16:13:00Z",
            "status": [
                "clientDeleteProhibited",
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns3.my-ndns.com",
                "ns4.my-ndns.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client delete prohibited",
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-22T16:13:00Z",
                "registration": "2026-10-22T16:13:00Z",
                "registrar expiration": "2027-10-22T16:13:00Z",
                "last update of RDAP database": "2026-10-22T16:13:00Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T09:39:36Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "hashbitx.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-25T09:03:53Z",
            "first": "2026-10-25T09:03:53Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 58782
        },
        "robots_txt": {
            "present": true,
            "sitemaps": [
                "https://hashbitx.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 9
        },
        "social_tags": {
            "title": "HASHBITX: Spot crypto trading and stablecoin yield",
            "ogType": "website",
            "ogImage": "https://hashbitx.com/opengraph-image",
            "ogTitle": "HASHBITX",
            "ogSiteName": "HASHBITX",
            "themeColor": "#000000",
            "description": "Spot crypto trading and stablecoin yield",
            "twitterCard": "summary_large_image",
            "ogDescription": "Spot crypto trading and stablecoin yield"
        },
        "trackers": {
            "requests": 103
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 83,
                "tls": 30,
                "wait": 152,
                "connect": 87,
                "download": 178
            },
            "response_ms": 530
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 437710,
            "co2_grams": 0.016,
            "cleaner_than": 1
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "154.85.54.43",
                    "host": "ns3.my-ndns.com"
                },
                {
                    "ip": "43.162.114.218",
                    "host": "ns4.my-ndns.com"
                }
            ],
            "zone": "hashbitx.com"
        },
        "location": {
            "ip": "82.26.146.108",
            "asn": "3356",
            "org": "Level 3 Communications, Inc.",
            "city": "Frankfurt am Main",
            "country": "DE"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "hashbitx.com"
        },
        "dns": {
            "A": [
                "82.26.146.108"
            ],
            "NS": [
                "ns4.my-ndns.com",
                "ns3.my-ndns.com"
            ],
            "SOA": "{\"nsname\": \"hashbitx.com\", \"hostmaster\": \"root.hashbitx.com\", \"serial\": 2026102300, \"refresh\": 7200, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 7200}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": "DENY",
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'",
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "82.26.146.108",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://hashbitx.com"
            ]
        },
        "linked_pages": {
            "internal_count": 14
        },
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-10-22T16:13:00Z",
            "updated": "2026-10-22T16:13:00Z",
            "expires": "2027-10-22T16:13:00Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns3.my-ndns.com",
                "ns4.my-ndns.com"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "content-security-policy": "frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'",
                "x-frame-options": "DENY",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin"
            }
        }
    }
}
```