bytexs[.]cc

The domain bytexs.cc was registered on February 21, 2026 through NameCheap, Inc. It currently resolves to the IPv6 address 2a02:4780:43:17b1:f49f:ac3:4543:dfec, which is allocated to a Hostinger International Limited network in Germany (AS47583). The web server returns an HTTP 302 redirect, presents a Let’s Encrypt (R12) TLS certificate, and the page title reported by the server is “Access Verification”.

Infrastructure analysis shows the site runs PHP, is delivered via Hostinger’s CDN, and supports HTTP/3. Mail exchange is configured with mx1.hostinger.com (priority 5) and mx2.hostinger.com (priority 10). Authoritative name servers are ns1.dns-parking.com and ns2.dns-parking.com, a common configuration for newly‑pointed or parked domains.

Threat intelligence classifies the domain as high‑risk generic phishing. It appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal records six of ninety‑five scanners flagging the domain as malicious, and Gridinsoft assigns a trust score of 0 out of 100. These data points, together with the observed redirection behavior and the “Access Verification” page title, indicate an operational credential‑harvesting campaign.

Defenders should block bytexs.cc at the DNS and network level, deny outbound connections to the associated IPv6 address, and add the domain to email filtering rules. Monitoring for queries to the ns1.dns-parking.com and ns2.dns-parking.com name servers can provide early warning of related activity. Ongoing re‑assessment is recommended to capture any changes in hosting, page content, or additional malicious indicators.