Phishing impersonating Bitwarden, confirmed by the reporting analyst. Associated URL(s): http://125.136.173.236:8123/. Observation date confirmed by analyst: 2026-10-22; exact observation time not recorded.
The reported IP addresses are hosting phishing pages that impersonate Bitwarden by mimicking its official login interface to trick users into entering sensitive credentials. This activity involves credential harvesting, unauthorized use of Bitwarden’ ...
show moreThe reported IP addresses are hosting phishing pages that impersonate Bitwarden by mimicking its official login interface to trick users into entering sensitive credentials. This activity involves credential harvesting, unauthorized use of Bitwarden’s branding, and poses a serious risk of account compromise and data theft. Immediate investigation and takedown are requested.
show less
The reported IP addresses are hosting phishing pages that impersonate Bitwarden by mimicking its official login interface to trick users into entering sensitive credentials. This activity involves credential harvesting, unauthorized use of Bitwarden’ ...
show moreThe reported IP addresses are hosting phishing pages that impersonate Bitwarden by mimicking its official login interface to trick users into entering sensitive credentials. This activity involves credential harvesting, unauthorized use of Bitwarden’s branding, and poses a serious risk of account compromise and data theft. Immediate investigation and takedown are requested.
show less
The reported IP addresses are hosting phishing pages that impersonate Bitwarden by mimicking its official login interface to trick users into entering sensitive credentials. This activity involves credential harvesting, unauthorized use of Bitwarden’ ...
show moreThe reported IP addresses are hosting phishing pages that impersonate Bitwarden by mimicking its official login interface to trick users into entering sensitive credentials. This activity involves credential harvesting, unauthorized use of Bitwarden’s branding, and poses a serious risk of account compromise and data theft. Immediate investigation and takedown are requested.
show less
The reported IP addresses are hosting phishing pages that impersonate Bitwarden by mimicking its official login interface to trick users into entering sensitive credentials. This activity involves credential harvesting, unauthorized use of Bitwarden’ ...
show moreThe reported IP addresses are hosting phishing pages that impersonate Bitwarden by mimicking its official login interface to trick users into entering sensitive credentials. This activity involves credential harvesting, unauthorized use of Bitwarden’s branding, and poses a serious risk of account compromise and data theft. Immediate investigation and takedown are requested.
show less
The reported IP addresses are hosting phishing pages that impersonate Bitwarden by mimicking its official login interface to trick users into entering sensitive credentials. This activity involves credential harvesting, unauthorized use of Bitwarden’ ...
show moreThe reported IP addresses are hosting phishing pages that impersonate Bitwarden by mimicking its official login interface to trick users into entering sensitive credentials. This activity involves credential harvesting, unauthorized use of Bitwarden’s branding, and poses a serious risk of account compromise and data theft. Immediate investigation and takedown are requested.
show less
Phishing
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
