bitronox[.]com

The domain bitronox.com is currently active and flagged as a high-risk brand impersonation threat targeting Across, a legitimate cryptocurrency platform. Analysis indicates the site presents itself as a cryptocurrency exchange under the name YukiTale, offering services such as buying and selling Bitcoin and Ethereum. This constitutes a clear attempt to deceive users into engaging with fraudulent financial services by leveraging the reputation of the impersonated brand. Infrastructure analysis reveals multiple concrete indicators of malicious activity. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and resolves to the IP address 104.21.81.162, hosted on Cloudflare’s network (AS13335). Security vendors have flagged the domain in 17 out of 95 VirusTotal scans, while Google Safe Browsing explicitly classifies it as phishing. Additionally, the domain appears on one security blocklist, specifically PhishDestroy, and uses an SSL certificate issued by Google Trust Services (WE1). The page title, 'Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | YukiTale,' further confirms the fraudulent intent to mimic legitimate exchange platforms. Given the active status and high-risk classification, users are strongly advised to avoid interacting with bitronox.com. The domain should be blocked at the network level, and any credentials or financial details entered on the site should be considered compromised. Organizations should update their threat intelligence feeds to include this domain and its associated indicators, such as the IP address and registrar details, to prevent further exposure. Immediate reporting to relevant cybersecurity authorities is recommended to mitigate potential harm to end users.