bitaris-fundcore[.]today

This domain is flagged as an elevated-risk phishing infrastructure targeting cryptocurrency traders. Analysis indicates it impersonates a legitimate crypto trading platform under the guise of "Bitaris Fundcore," offering fraudulent market signals and investment opportunities. The specific threat type involves credential harvesting and financial fraud, likely designed to deceive users into disclosing sensitive account details or transferring funds to attacker-controlled wallets. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited. It resolves to the IP address 172.67.219.16 and is currently listed on two security blocklists: PhishDestroy and OISD. VirusTotal reports 5 out of 95 security vendors flagging the domain as malicious. The domain's trust score is rated 0/100 by Gridinsoft, and its SSL certificate is issued by Google Trust Services. Detected technologies include Envoy, HSTS, Cloudflare, and HTTP/3, suggesting the use of content delivery networks to obfuscate hosting origins and evade detection. Mitigation steps for this threat type include blocking the domain and associated IP address at the network perimeter. Organizations should update endpoint protection rules to flag any attempts to access the domain or related infrastructure. Users should be educated on recognizing phishing indicators, such as unsolicited investment offers, urgency tactics, and requests for cryptocurrency transfers. Financial institutions and crypto exchanges should monitor for transactions linked to this domain or its impersonated brand and implement additional verification steps for high-risk activities. Incident responders should preserve logs of any interactions with the domain for forensic analysis.