whitebit-inc[.]com

The domain whitebit-inc.com was registered on March 14, 2026 through Sav.com, LLC and is currently active. DNS resolution points to the IP address 172.67.164.1, which is served by Cloudflare as indicated by the authoritative nameservers gabe.ns.cloudflare.com and keira.ns.cloudflare.com. VirusTotal reports that one of ninety‑one security vendors has flagged the domain, confirming at least a single detection among many scanners.

The domain is listed on one external security blocklist and is actively blocked by the PhishDestroy mitigation service, showing that at least one defensive feed has recognized it as malicious. The available intelligence classifies the threat as generic phishing, but no page title, SSL certificate details, HTTP response codes, or additional content analysis have been published, so the exact phishing flow and targeted brand remain undocumented. The limited detection footprint—only one vendor flag and a single blocklist entry—suggests that the malicious infrastructure may be newly deployed or low‑profile, yet the presence of a Cloudflare front‑end indicates an attempt to obscure origin and leverage a reputable CDN for resilience.

Defenders should add the domain to outbound filtering rules, enforce DNS‑based blocklists that include the observed entry, and monitor any traffic to the associated IP address for anomalous patterns. Continuous re‑scanning on VirusTotal and other multi‑engine platforms is advised to capture any future detection escalation. Network sensors should also log TLS handshakes to the domain to capture potential certificate changes, and SOC analysts should watch for any emergence of page‑title or content signatures that could refine the phishing attribution.