bitspronix[.]com

This domain, bitspronix.com, is flagged for brand impersonation targeting Ethereum, a major cryptocurrency platform. Analysis indicates the site masqueraded as a legitimate exchange under the guise of forex trading, a common tactic to deceive users into disclosing credentials or transferring funds. No direct evidence of a crypto drainer kit was observed, but the domain’s infrastructure and content align with known impersonation schemes in the cryptocurrency sector.

Technical indicators reveal multiple red flags: the domain was registered on February 03, 2025, through Atak Domain, a registrar frequently associated with high-risk registrations. It resolves to the IP address 198.12.66.123, hosted on AS36352 (HostPapa) in the United States. VirusTotal reports 14 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The site lacks an SSL certificate, further undermining its legitimacy. Google Safe Browsing (GSB) does not currently list the domain, but this does not mitigate the elevated risk given other indicators.

As of the latest assessment, bitspronix.com has been taken offline, likely in response to detection by security systems such as PhishDestroy. However, the infrastructure remains a potential threat. The domain’s registration is still active, and the IP address may be reused for future malicious activity. Users are advised to treat any future communications or domains associated with this infrastructure as high-risk. Monitoring for re-registration under similar names or shifts to new hosting providers is recommended to preempt further abuse.