en[.]bitwealthfrontz[.]com

Analysis of the domain en.bitwealthfrontz.com indicates a high-risk phishing campaign targeting users with fraudulent investment services. The domain was registered on November 18, 2025, through Global Domain Group LLC and resolves to the IP address 82.221.129.24, hosted on AS50613 (Advania Island ehf) in Iceland. Nameservers buffy.ns.orangewebsite.com and siti.ns.orangewebsite.com are associated with the infrastructure, which has been flagged by at least one security blocklist (PhishDestroy). Google Safe Browsing classifies the domain under 'social engineering,' reinforcing its malicious intent. The page title, 'BiT WealthFRONT – Safe investment with BiT WealthFRONT,' suggests a fraudulent investment scheme, though no brand confirmation or kit analysis is available in the provided data.

As of the report date, the domain is offline, but prior activity was detected by 10 of 95 security vendors on VirusTotal, indicating moderate detection coverage. The domain lacks an SSL certificate, a common red flag for phishing sites. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious classification. Defenders should treat this domain as confirmed malicious infrastructure.

Historical resolution to 82.221.129.24 and associated nameservers should be blocked at the network level. While the site is currently offline, monitoring for re-registration or changes in hosting is recommended. No evidence of a specific phishing kit or additional brand impersonation is present in the available data, but the investment-themed page title aligns with known scam patterns. Organizations should review logs for connections to the IP or domain prior to its takedown and alert users who may have interacted with the site.