bitexgold[.]com

Analysis of bitexgold.com shows a newly registered domain (created 21 February 2026) that was used to host a cryptocurrency exchange‑style landing page titled “Buy/Sell Bitcoin, Ether and Altcoins | Cryptocurrency Exchange | Bitexgold”. The page title and the listed brand target “avalanche” indicate a crypto‑scam that impersonates the Avalanche project. The domain resolves to IP 104.21.80.1, which is part of Cloudflare’s network (AS13335) located in the United States. The SSL certificate presented is identified as “WE1”, a common certificate issued by Cloudflare for many hosted sites.

VirusTotal reports that one of ninety‑three scanning engines flagged the domain, and the site appears on a single security blocklist, PhishDestroy. Independent reputation services assign a Gridinsoft trust score of zero out of one hundred, reinforcing the malicious assessment. The site was taken offline at the time of reporting, and no live HTTP response could be captured. No additional indicators such as malware payloads, redirection chains, or credential‑harvesting forms have been disclosed, leaving the precise phishing kit unknown.

Defenders should add bitexgold.com to DNS and URL filtering policies, block the associated Cloudflare IP range if feasible, and monitor for re‑use of the same IP or certificate fingerprint. Continuous re‑scanning of the domain and its infrastructure is recommended to capture any future re‑activation. The limited detection footprint suggests the campaign may be short‑lived, but the combination of brand impersonation, low trust score, and presence on a security blocklist warrants an elevated risk rating.