bitfolixx[.]com

The domain bitfolixx.com was registered on 2026-02-21 through Atak Domain Bilgi Teknolojileri A.S. and is currently taken offline. The site presented the page title “Bitfolixx – Investment Consulting,” suggesting a financial‑service façade, but the only confirmed malicious behavior is the impersonation of the brand x.com, as indicated by the intelligence tag “Impersonates: x.com.” Technical probing shows the domain resolves to IP address 198.12.66.123, which belongs to the HostPapa hosting network (AS36352) located in the United States. The SSL certificate presented (labelled R11) does not appear to be associated with any recognized certificate authority, further reducing confidence in the site’s legitimacy.

A trust assessment from Gridinsoft rated the domain 0 out of 100, indicating an extremely low reputation score. The domain appears on a single security blocklist, specifically blocked by PhishDestroy, and VirusTotal reported a single positive detection out of 93 scanning engines. No additional public threat‑intel feeds (such as OTX or Safe Browsing) are cited in the provided data.

Given the recent registration date, the low trust score, the presence on a blocklist, and the confirmed brand‑impersonation indicator, defenders should treat bitfolixx.com as a high‑confidence malicious indicator. Recommended actions include adding the domain to DNS‑based blocklists, updating endpoint and firewall deny lists, and monitoring the associated IP range (198.12.66.0/24) for any future activity. Continuous re‑scanning of the domain, should it become active again, is advised to capture any evolving payloads or additional detections.