bitnestx2vault[.]vercel[.]app

The domain bitnestx2vault.vercel.app was registered through Tucows Domains Inc. on February 21, 2026 and is currently listed as taken offline. DNS resolution points to the IP address 216.198.79.3, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The hosting environment is identified as Vercel, and the site served HTTPS with HSTS enabled using a certificate issued by Google Trust Services (WR1). An HTTP request to the host returns status code 451, indicating that the content is unavailable for legal reasons.

The page title returned from the site is "BITNEST," aligning with the reported scam type of an investment scam. The domain appears on a single security blocklist and is actively blocked by PhishDestroy. VirusTotal analysis recorded three detections out of ninety‑three scanning engines, confirming malicious activity despite the relatively low count. The elevated risk rating reflects the combination of recent creation, use of a reputable cloud provider, and the presence of malicious detections.

While the exact phishing content has not been captured, the observed indicators—short‑lived domain, investment‑scam labeling, and multi‑vendor flagging—suggest that the infrastructure was employed to lure victims into fraudulent investment schemes. Defenders should continue to block the domain at network perimeter devices, monitor for any resurgence of the host on additional blocklists, and correlate traffic to the associated IP address for possible reuse. Further analysis of any cached page snapshots or user reports would be required to confirm the specific payload or credential‑harvesting mechanisms, but the current evidence warrants continued vigilance.