bhapprise[.]digital

Analysis shows bhapprise.digital was registered on February 21, 2026 and is currently hosted behind Cloudflare’s network (AS13335). The domain resolves to IP 104.21.52.98, utilizes HTTP/3, and presents a valid SSL certificate issued by Google Trust Services under the WE1 label. Nameserver delegation to naomi.ns.cloudflare.com and denver.ns.cloudflare.com confirms the use of Cloudflare’s DNS infrastructure. The site returns an HTTP 200 response, but the page title reports a “521: Web server is down” error, indicating a possible misconfiguration or intentional denial of service to obscure content.

Threat intelligence flags bhapprise.digital as a generic_phishing actor. The domain appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal analysis records three of ninety‑five scanners flagging the domain, reinforcing the suspicion of malicious intent. The low Gridinsoft trust score of 0 / 100 further underscores the poor reputation associated with the domain.

Uncertainty remains regarding the exact phishing payload or target audience, as no page content has been captured beyond the title. The presence of a valid TLS certificate and Cloudflare front‑end may be employed to lend credibility to phishing emails or messages that reference the domain. Additionally, the “521” error could be a tactic to evade automated crawlers while still serving malicious content to specific victims.

Defenders should block outbound connections to 104.21.52.98 and add bhapprise.digital to domain deny lists across email gateways, web proxies, and endpoint protection platforms. Continuous monitoring of DNS queries for this domain is advised, as any sudden change in resolution or additional IP addresses could signal scaling of the campaign. Organizations using threat‑intel feeds should ensure the domain remains flagged in their security blocks, and incident response teams should be prepared to investigate any user reports involving links to bhapprise.digital.