whitebit-login[.]at

This domain is flagged for elevated-risk credential phishing activity targeting cryptocurrency exchange users. Analysis indicates the site whitebit-login.at impersonates the legitimate WhiteBIT platform login interface, specifically designed to harvest user credentials and session tokens. Infrastructure analysis reveals the domain resolves to IP address 95.129.234.137 and was registered through DDoS-Guard. Security vendor detection shows 2/95 engines on VirusTotal flagged the domain as malicious. The site appears on 2 security blocklists and maintains a Gridinsoft trust score of 0/100. Technologies detected include Vue.js, jQuery, and Hammer.js, with DDoS-Guard protection services active. The SSL certificate is issued by Let's Encrypt. Mitigation requires immediate blocking of the domain and associated IP address across all network security controls. Organizations should implement email filtering rules to quarantine messages containing this domain, particularly those with login-themed subject lines. Security teams must invalidate any credentials potentially exposed to this phishing site and enforce multi-factor authentication for all affected accounts. Network monitoring should prioritize detection of connections to 95.129.234.137 and related infrastructure. User awareness training should emphasize verification of domain authenticity before entering credentials, especially for financial platforms.