bitcheck-jp[.]com

This domain, bitcheck-jp.com, operates as a crypto investment scam designed to deceive users into disclosing sensitive credentials or transferring cryptocurrency under false pretenses. The site presents itself as a legitimate investment platform with the page title 'Bitcheck-JP – Safe investment with Bitcheck-JP,' exploiting trust in financial services to lure victims. Analysis indicates the infrastructure is specifically crafted to mimic authentic crypto trading or wallet services, increasing the likelihood of successful credential theft or unauthorized fund transfers. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on January 16, 2025, through Cosmotown, Inc., a registrar frequently associated with malicious activity. It resolves to the IP address 163.61.188.222, hosted on AS153568 (NEW DHAKA HARDWARE), an autonomous system with a history of supporting fraudulent domains. Security vendors on VirusTotal flagged the domain at a rate of 11/95, while it appears on at least one security blocklist. The absence of an SSL certificate further undermines its legitimacy, as modern financial platforms universally enforce encrypted connections. Users who visited bitcheck-jp.com should immediately cease all interaction and assume their credentials or financial details may have been compromised. Those who entered login information or connected a cryptocurrency wallet should revoke any active sessions, reset passwords using a secure device, and monitor linked accounts for unauthorized transactions. Cryptocurrency users should transfer funds to a new wallet and review blockchain transactions for suspicious activity. System scans with updated security tools are recommended to detect potential malware. Organizations should add the domain and its associated IP (163.61.188.222) to network blocklists to prevent further exposure.