btinternetmagnificent[.]sellfy[.]store

This domain, btinternetmagnificent.sellfy.store, presents a page titled "Store Doesn't Exist," indicating it is a non-functional or placeholder site. The domain impersonates the BT brand, specifically "btinternet," and is hosted on a Sellfy store platform. The primary threat is phishing, as the site is designed to deceive users into believing they are accessing a legitimate BT Internet service, potentially to harvest credentials or sensitive information. The site poses a risk of credential theft and unauthorized access to user accounts.

Technical evidence shows the domain is flagged by 9 out of 95 VirusTotal vendors, including Criminal IP, alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, and Fortinet. It is listed on 2 blocklists. The domain was created on 2026-02-21 and registered through Go Daddy, LLC. It resolves to IP address 3.214.66.127, located in the United States, and is associated with AS14618 Amazon.com, Inc. The site uses an SSL certificate issued by Let's Encrypt (E7) and has nameservers kara.ns.cloudflare.com and will.ns.cloudflare.com. The DOM risk score is 63.

The current status of the site is DOWN/OFFLINE. The risk level is moderate, as indicated by the DOM risk score of 63 and the presence of multiple vendor detections and blocklists. The domain's recent creation date and non-functional page suggest it was set up for malicious purposes but is currently inactive.