bittensor-hub[.]vercel[.]app

Analysis indicates that the domain bittensor-hub.vercel.app was registered on 21 February 2026 through Tucows Domains Inc. The site was hosted on Vercel infrastructure, as evidenced by the presence of Vercel technology signatures and the use of HTTP Strict Transport Security (HSTS). The domain resolves to the IP address 216.198.79.3, which is owned by Amazon.com, Inc. (AS16509) and is geolocated to the United States. An SSL certificate issued by Google Trust Services under the WR1 label secures the connection, confirming that the site employed a valid TLS certificate. When accessed, the HTTP response returned status code 451, indicating that the content was unavailable for legal reasons.

The page title observed during the brief probe was “Bittensor”, but no further content was retrieved before the service was taken offline. The domain appears on two public phishing blocklists, PhishDestroy and ScamSniffer, and has been flagged by three of ninety‑three security vendors on VirusTotal, reinforcing the suspicion of malicious intent. The combination of a recently created domain, deployment on a widely used cloud platform, a legitimate TLS certificate, and inclusion on multiple anti‑phishing feeds is characteristic of opportunistic phishing infrastructure that leverages reputable hosting to evade simple reputation checks. However, the exact phishing campaign, targeted brand, or credential‑stealing mechanism cannot be confirmed from the available data because the site is no longer reachable and no payload samples have been captured.

Defenders should block or monitor traffic to bittensor-hub.vercel.app at the DNS and network layers, add the domain to internal threat‑intel feeds, and consider correlating any recent authentication attempts against the Bittensor brand or related services with this indicator. Continuous observation of Vercel‑hosted assets originating from the same IP range (216.198.79.0/24) is advisable, as threat actors often reuse infrastructure.