bitaryx[.]com

Analysis of the domain bitaryx.com indicates it was actively impersonating the social-media platform X.com as part of a brand-impersonation campaign. The domain was registered on October 16, 2025, through Dominet (HK) Limited, a registrar frequently observed in phishing operations targeting major brands. Infrastructure analysis reveals the site was hosted behind Cloudflare IP 104.21.29.250 (AS13335, United States), utilizing Cloudflare nameservers elaine.ns.cloudflare.com and khalid.ns.cloudflare.com. No SSL certificate was detected, increasing the likelihood of interception or tampering during user sessions.

At the time of assessment, the domain returned an HTTP response with the page title 'Just a moment...', a common Cloudflare interstitial that may have obscured the actual phishing content from automated crawlers or security researchers. Detection metrics show limited but clear indicators of malicious activity: three of ninety-three security vendors on VirusTotal flagged the domain, and it appeared on at least one public blocklist. Scamadviser assigned a trust score of 1 out of 100, while Gridinsoft rated it 14 out of 100, both reflecting elevated risk levels. The domain has since been taken offline, as confirmed by its current status and the absence of active resolution.

However, the registration details, hosting provider, and detection history provide sufficient evidence to classify bitaryx.com as a confirmed brand-impersonation threat targeting X.com users. Defenders are advised to treat this domain as malicious in historical logs and retroactive threat-hunting efforts. No additional phishing kit details or payload samples are available at this time, and the exact content served to victims remains unanalyzed. Organizations should monitor for related domains registered through the same registrar or hosted on similar Cloudflare IP ranges.