bitnova[.]biz

On July 28, 2026, the domain bitnova.biz was identified as a high‑risk generic phishing infrastructure still active. Registration data show the domain was created through Web Commerce Communications Limited dba WebNic.cc, indicating a commercial registrar often associated with rapid bulk registrations. The authoritative DNS servers are elias.ns.cloudflare.com and rose.ns.cloudflare.com, confirming Cloudflare as the DNS provider and suggesting the use of Cloudflare’s edge network for resilience. Google Safe Browsing has flagged the domain for social engineering, reinforcing the phishing classification.

An HTTP 301 redirect response was observed, which may be employed to forward victims to a malicious payload or to obscure the final landing page. VirusTotal analysis reports that fifteen of ninety‑one scanned security vendors flagged the domain, reflecting a moderate consensus among detection engines. Additionally, the domain appears on a single external blocklist, and PhishDestroy has already added it to its blocklist, providing immediate mitigation for clients that ingest that feed. The available evidence does not include a detailed page title, SSL certificate details, or hosting IP address, leaving the exact content and hosting geography unverified.

Consequently, the precise phishing lure and target brand remain unknown pending deeper content inspection. Defenders should prioritize adding bitnova.biz to URL filtering and DNS sinkhole policies, especially those that incorporate the PhishDestroy feed. Continuous monitoring of Cloudflare DNS records is advised to detect any rapid changes that may indicate a shift in infrastructure. Given the active status and multi‑vendor detection, organizations should treat any traffic to this domain as malicious and block it at the perimeter, endpoint, and proxy layers.