silnainvestmin[.]biz

The domain silnainvestmin.biz was registered on March 06, 2026 through Dynadot LLC and is currently taken offline. It resolves to the Cloudflare edge address 104.21.91.12, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. The site presented the page title “Silna Investmin 2026: Využijte příležitostí Bitcoin ETF,” indicating a direct attempt to impersonate the Bitcoin brand and lure victims with a purported Bitcoin exchange‑traded fund offering. The SSL certificate is issued by Let’s Encrypt (identifier E8), confirming the use of a free, automated certificate.

Nameserver delegation points to felipe.ns.cloudflare.com and jule.ns.cloudflare.com, both Cloudflare authoritative servers, reinforcing the reliance on Cloudflare’s CDN and DNS services. Threat intelligence vectors show the domain is listed on three security blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL, suggesting active detection by anti‑phishing and cryptocurrency wallet protection tools. VirusTotal analysis recorded 2 detections out of 94 scanning engines, evidencing that a minority of AV products flagged the domain as malicious. The classification is explicitly marked as “Brand Impersonation” targeting Bitcoin, with no additional malware kit or payload details observed.

Uncertainty remains regarding the exact content that was served before takedown, as the site is no longer reachable and no visual or form data have been captured. Defenders should continue to block the IP address 104.21.91.12 at perimeter devices, enforce DNS filtering for silnainvestmin.biz, and monitor Cloudflare‑associated sub‑domains for similar brand‑impersonation patterns. Inclusion of the domain in internal threat‑intel feeds and periodic re‑scanning with VirusTotal or comparable services is recommended to capture any future activity should the site be resurrected.