bitnexy[.]com

bitnexy.com was registered on February 21, 2026 through Dynadot LLC. The domain resolves to the IP address 199.59.243.228, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. HTTP requests return a 200 status code, and the site presents a page title of 'bitnexy.com'. No TLS certificate is observed, indicating the service is delivered over plain HTTP. Multiple security feeds have flagged bitnexy.com as malicious. VirusTotal reports that 5 out of 95 scanned vendors have flagged the domain, and Gridinsoft assigns a trust score of 0 out of 100. The domain appears on two public blocklists and has been added to the PhishDestroy and Enkrypt blocklists. AlienVault OTX records the domain in two separate threat intelligence pulses, reinforcing its association with phishing activity. The authoritative nameservers for the domain are piers.ns.cloudflare.com and samara.ns.cloudflare.com, both operated by Cloudflare. This configuration provides resilience and fast DNS resolution, a pattern commonly observed in malicious infrastructure. The hosting on Amazon's network combined with Cloudflare DNS suggests a low-cost, quickly provisioned service intended for short‑term campaigns. Beyond the metadata, the actual content served by bitnexy.com has not been publicly disclosed in the available intelligence. The page title matches the domain, but no further analysis of login forms, payloads, or credential harvesting mechanisms is present. Consequently, the specific phishing vector, targeted brands, or victim demographics remain unknown. Defenders should prioritize immediate blocking of bitnexy.com at network perimeter and DNS filtering layers. Continuous monitoring of the associated IP address 199.59.243.228 is advised, as the host may be repurposed for additional malicious domains. Threat‑intel teams should enrich future observations with content analysis to determine the exact phishing methodology and update detection signatures accordingly.