bitfoex[.]com

The domain bitfoex.com is currently offline, returning HTTP 521 indicating the web server is down. Registration data shows it was created on July 29 2025 through Webcentral Group Ltd. The authoritative nameservers are clint.ns.cloudflare.com and shubhi.ns.cloudflare.com, and DNS resolution points to IP 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No TLS certificate is presented for the host, confirming the absence of HTTPS support. Reputation services assign extremely low scores: Gridinsoft rates the domain 0 / 100 and Scamadviser 1 / 100.

The domain is listed on one security blocklist and has been explicitly blocked by PhishDestroy. VirusTotal scans show five of ninety‑five antivirus engines flag the domain as malicious. The observed page title “bitfoex.com | 521: Web server is down” matches the offline status. Threat intelligence attributes the site to a social‑media phishing campaign that impersonates the brand x.com and utilizes an “Airdrop Scam” phishing kit.

Because the site is not presently serving content, the exact payload and credential‑capture mechanisms cannot be confirmed. However, the combination of low trust scores, blocklist presence, multiple vendor detections, and the declared use of a known phishing kit provides strong evidence of malicious intent. Defenders should continue to block the domain at network perimeter and endpoint filters, add the IP address 188.114.97.3 to deny lists, and monitor for any future re‑hosting attempts that may appear under different subdomains or hosting providers. Ongoing observation of the registrar Webcentral Group Ltd for new registrations resembling the target brand is also advised.