bitgrex[.]io

The domain bitgrex.io was registered through NameCheap, Inc. on July 16, 2025 and is currently listed as taken offline. Technical profiling shows the domain resolves to the Cloudflare edge address 104.21.20.56, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. Both authoritative nameservers, buck.ns.cloudflare.com and veda.ns.cloudflare.com, indicate the use of Cloudflare's DNS service. An SSL certificate issued by Google Trust Services (WE1) is present, confirming HTTPS support, and the page returns an HTTP 200 status code when queried.

The visible page title, "Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Bitgrex," explicitly references Ethereum, matching the listed brand impersonation target. VirusTotal analysis records nine of ninety‑three security vendors flagging the domain, reinforcing the malicious assessment. The domain appears on a single external security blocklist and has been blocked by the PhishDestroy feed.

While the site is presently offline, the combination of brand‑specific page title, Cloudflare hosting, recent registration, and multiple vendor detections suggests an active phishing infrastructure that was likely used to lure victims seeking cryptocurrency services. Defenders should continue to block the domain at network perimeter devices, monitor DNS queries for the associated IP address, and update endpoint protection signatures to reflect the nine vendor detections. Ongoing observation of the domain's status and any re‑activation attempts is recommended, as threat actors often resurrect offline infrastructure after takedown actions.