bestbitmix[.]org

bestbitmix.org is an active crypto‑scam infrastructure observed as of 12 July 2026. The domain was registered on 17 October 2023 through NetEarth One Inc. d/b/a NetEarth and resolves to the IPv4 address 198.252.105.119, which belongs to AS20068 Hawk Host Inc. in the United States. Authoritative name servers are ns13.hawkhost.com and ns14.hawkhost.com. The web server presents a valid Let's Encrypt certificate (R12) and returns HTTP 200 responses, supporting HTTP/3, LiteSpeed, Bootstrap and jQuery. The visible page title, “Биткоин миксеры | Лучшие Биткоин микшеры”, indicates a focus on Bitcoin mixing services, yet the domain is classified as impersonating the Ethereum brand. Threat intelligence flags the site as high‑risk; it appears on one security blocklist (PhishDestroy) and received a single detection from 95 VirusTotal scanners. Reputation services assign low trust scores (Scamadviser 21/100, Gridinsoft 0/100). Current analysis cannot confirm the exact phishing payload or credential‑capture mechanisms because the page content has not been examined. Defenders should block the domain at perimeter filters, monitor DNS queries for the domain and its associated IP, and consider adding the IP to threat‑intel feeds. Ongoing observation is recommended to detect any changes in hosting or content.