bit-pay[.]co

The domain bit-pay.co is currently active and has been identified as a high‑risk brand‑impersonation site. It presents the page title “BitPay: The Best Crypto App to Pay with Crypto + Accept Payments |”, indicating a cryptocurrency focus. The site is listed on three security blocklists and has been flagged by one of ninety‑five VirusTotal scanners. Its SSL certificate is issued by Let’s Encrypt (E7), and the HTTP response returns status code 200.

Infrastructure analysis shows the domain resolves to IP address 104.18.78.118, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The authoritative nameservers are a.share-dns.com and b.share-dns.net, both typical of shared DNS services. The domain was registered on March 11, 2026, and remains active as of the report date.

Threat intelligence sources reinforce the malicious assessment. The domain appears in twenty‑two AlienVault OTX pulses and is present on three security blocklists. It has been explicitly blocked by PhishDestroy, SEAL, and additional security solutions. Gridinsoft assigns a trust score of zero out of one hundred, and the site is categorized as a cryptocurrency scam. The impersonated brand is listed as “across,” though the page content has not been publicly reviewed to confirm the extent of brand misuse.

Defenders should add bit-pay.co to network‑level deny lists and configure web filters to block both HTTP and HTTPS traffic to the resolved IP address. Continuous monitoring of DNS queries for the associated nameservers is advised, as well as periodic re‑scanning with multi‑engine services to detect any changes in payload or hosting. Incident response teams should treat any credential or payment data submitted to this domain as compromised and advise affected users to change authentication details immediately.