bitfinexes[.]com

The domain bitfinexes.com is a confirmed phishing site engaged in brand impersonation targeting Bitfinex, a well-known cryptocurrency exchange. This site was designed to deceive users into believing they were interacting with the legitimate Bitfinex platform, likely to harvest login credentials or other sensitive information. No crypto drainer kit was identified in this case. As of the latest verification, bitfinexes.com has been taken offline.

Technical analysis reveals that bitfinexes.com was flagged by 1 of 95 security vendors on VirusTotal, including Gridinsoft, which assigned it a trust score of 0 out of 100. The domain was registered through Amazon Registrar, Inc. on August 21, 2025, and resolved to the IP address 43.159.98.27, located in Singapore under AS139341 (ACE). It appeared on one security blocklist, PhishDestroy, and had no SSL certificate issued. The observed page title was 'Bitfinex', reinforcing its impersonation of the legitimate brand.

Users who may have interacted with bitfinexes.com should immediately change their Bitfinex account passwords and enable two-factor authentication (2FA) if not already active. Monitor accounts for unauthorized transactions or suspicious activity. Report the phishing domain to Bitfinex’s official security team and consider submitting it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts.