sideshift[.]eth-btc[.]pro

On July 24, 2026, the domain sideshift.eth-btc.pro was identified as a crypto scam targeting individuals involved in direct to wallet trading. The domain was created on February 21, 2026, and has since been taken offline. Analysis indicates that the domain was using Cloudflare for DNS management and HTTP/3 for web protocol, suggesting a modern and potentially sophisticated infrastructure. The domain resolved to the IP address 188.114.96.3, located in the United States under the ASN AS13335, which is associated with Cloudflare, Inc. The site's SSL certificate was issued by Google Trust Services, adding a layer of perceived legitimacy.

The domain appears on one security blocklist and is blocked by PhishDestroy, indicating it has been flagged for malicious activities. The page title of the site is 'SideShift.ai - Direct to Wallet Trading,' which may have been used to lure victims into believing they were accessing a legitimate trading platform. Despite the domain being offline, defenders should remain vigilant and ensure that any related infrastructure or similar domains are monitored. Security vendors flagged this domain, raising concerns about its use in phishing attacks.

The registrar for the domain is NiceNIC International Group Co., Limited, which may be a point of interest for further investigation. Given the elevated risk level, organizations should update their threat intelligence feeds and educate users about the dangers of visiting unverified trading platforms. Defenders should also consider implementing additional layers of security, such as DNS filtering and endpoint protection, to prevent access to similar domains.