bitwealthhubs[.]com

Analysis of bitwealthhubs.com indicates that the domain was actively used for a generic phishing campaign before being taken offline. The site presented the page title "BitWealth Hub - Trading for everyone," suggesting a financial‑themed lure. The domain was registered on March 01, 2025 through Atak Domain Bilgi Teknolojileri A.S., a registrar known to host a variety of malicious domains. Infrastructure data shows the domain resolved to IP address 212.28.189.136, which belongs to Contabo Inc. (AS40021) and is geolocated in the United States.

The SSL certificate associated with the host was rated R13, a low trust rating that aligns with malicious use. VirusTotal scans reported nine detections out of ninety‑three security vendors, confirming that multiple commercial scanners identified the domain as malicious. AlienVault OTX references the domain in one threat pulse, providing additional community‑based corroboration. The site has been blocked by PhishDestroy and appears on a single security blocklist, while the Gridinsoft trust score is a zero out of one hundred, indicating an extremely high risk assessment.

Although the domain is currently offline, the observed infrastructure components remain active and could be repurposed. Defenders should continue to block the domain and its associated IP address at perimeter defenses, update intrusion detection signatures with the observed indicators, and monitor for any re‑registration attempts. Continuous observation of Contabo‑hosted IP ranges for similar patterns is recommended, as the hosting provider has been linked to other phishing operations.