bitnezis[.]com

This domain, bitnezis.com, is actively engaged in brand impersonation targeting Ethereum, a major cryptocurrency platform. Analysis indicates the site mimics legitimate cryptocurrency exchange services, presenting itself as a platform for buying and selling Bitcoin and Ethereum. The domain remains operational and poses a high risk to users who may be deceived into disclosing sensitive credentials or transferring assets under false pretenses. Infrastructure analysis reveals the domain was registered on September 24, 2025, through Web Commerce Communications Limited. It resolves to the IP address 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.) in the United States. Security vendor assessments show that 1 of 95 VirusTotal engines flag the domain as malicious. The domain appears on one security blocklist and is currently blocked by PhishDestroy. Notably, the site lacks an SSL certificate, a red flag for any purported financial service. The page title, 'Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | BITNEZIS,' reinforces the impersonation of a legitimate exchange. Current status confirms the domain remains active, with no takedown or mitigation measures observed as of this report. Users and organizations are advised to block access to bitnezis.com at the network level and update endpoint protection rules to include this domain. Cryptocurrency holders should verify exchange authenticity by cross-referencing official Ethereum communication channels. Security teams are encouraged to monitor for related infrastructure, such as subdomains or newly registered lookalike domains, and report findings to relevant threat intelligence platforms for broader awareness.