hunbit[.]com

The domain hunbit.com was registered on August 13, 2025 through NiceNIC International Group Co., Limited and is currently resolved to the IP address 172.67.187.87, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The domain is served behind Cloudflare’s infrastructure, using the nameservers todd.ns.cloudflare.com and wren.ns.cloudflare.com, and presents a TLS certificate issued by Google Trust Services under the WE1 label. An HTTP request to the site returns a 403 status code, indicating that the resource is inaccessible, and the domain has been taken offline as of the report date, July 22, 2026. Intelligence feeds show that hunbit.com is flagged in three AlienVault OTX pulses and appears on a single security blocklist.

The Gridinsoft trust scoring system assigns it a score of 1 out of 100, reflecting extreme suspicion. VirusTotal analysis records five detections out of ninety‑three scanning engines, corroborating the malicious assessment. The site’s page title, "Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Hunbit," and the explicit claim of impersonating the Ethereum brand indicate a brand‑impersonation campaign targeting cryptocurrency users.

Defensive measures should include adding the domain to local blocklists, confirming that existing web filtering solutions flag it, and monitoring for any re‑registration attempts. Because the site is hosted behind Cloudflare, any future re‑hosting would likely reuse the same IP range, so security teams should watch for new domains resolving to 172.67.187.87 or adjacent Cloudflare nodes. The limited public evidence (no content scrape) leaves the exact phishing flow unknown, but the combination of low trust score, multiple vendor detections, and brand‑impersonation indicators justifies a high‑confidence classification as a malicious brand‑impersonation domain.