wesmere-bitmark[.]com

The domain wesmere-bitmark.com is currently active and has been classified as a high‑risk generic phishing site. The page title observed, “Wesmere Bitmark | Official website United Kingdom 2025”, indicates an attempt to impersonate a legitimate UK‑based service. The threat type is recorded as generic_phishing with a risk level of high. The domain was registered on February 21, 2026 through NETIM SAS and uses the Netim name server set (ns1.netim.net, ns2.netim.net, ns3.netim.net). DNS resolution points to the IPv4 address 94.26.38.18, which belongs to AS202412 owned by Omegatech LTD and is geolocated in Bulgaria. The web server reports HTTP 200 and runs Nginx with OpenResty, while client‑side libraries include Swiper and IPinfo. The site is protected by a Let’s Encrypt E8 certificate. Detection data show the domain appears on a single security blocklist and has been blocked by PhishDestroy. VirusTotal analysis recorded two positive detections out of ninety‑five scanned security vendors, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The impersonation tag aligns with the observed branding in the page title, suggesting a credential‑harvesting campaign. Defenders should add wesmere‑bitmark.com to network deny lists, enforce DNS sink‑holing for the associated IP address, and monitor any traffic to the Netim name servers for signs of reuse. Continuous re‑evaluation of VirusTotal and other threat intelligence feeds is advised, as additional detections may emerge. Blocking TLS connections to the Let’s Encrypt certificate fingerprint can further limit exposure.