bitpay[.]exchange

The domain bitpay.exchange was identified as a brand impersonation threat, targeting the BitPay crypto wallet brand. This domain attempted to deceive users by presenting itself as a legitimate self-custody wallet platform, as indicated by its page title 'bitpay.exchange - The Self-Custody Crypto Wallet for Everyone'. The threat type is credential theft, aiming to harvest sensitive information from unsuspecting victims.

Technical indicators for bitpay.exchange include a VirusTotal detection rate of 7 out of 95 security vendors flagging the domain as malicious. The domain was registered through HOSTINGER operations, UAB, and resolves to the IPv6 address 2a02:4780:43:6458:cb92:197a:183:4900. It was issued an SSL certificate by Let's Encrypt (R12), which is commonly abused by phishing sites. The domain appears on 1 security blocklist and was found in 1 AlienVault OTX threat intelligence pulse.

As of the current report, the domain has been taken offline, reducing immediate risk to users. However, similar domains may reappear under different registrars or IP addresses. Users should remain vigilant and only access official websites directly. PhishDestroy recommends blocking this domain and any related subdomains, and educating users to verify URLs carefully, especially for crypto-related services.