vip1011[.]dd528[.]com

Analysis of vip1011.dd528.com shows a domain that was registered on February 21, 2026 and is currently taken offline. The site presented the page title "Bitbtc-Mining", indicating a focus on cryptocurrency mining, and is classified as a crypto scam. Infrastructure inspection reveals that the domain resolves to IP address 172.67.139.38, which belongs to Cloudflare, Inc. (ASN 13335) and is geolocated in the United States. The SSL certificate presented for the host is identified as "WE1".

Reputation services provide a Gridinsoft trust score of 0 out of 100, reflecting an extremely low confidence level. The domain is listed on two security blocklists, specifically PhishDestroy and ScamSniffer, and has been flagged by three of ninety‑three VirusTotal scanners, confirming malicious intent beyond a single vendor. No additional evidence such as Safe Browsing or OTX entries is supplied.

Because the site is offline, HTTP status checks cannot be performed, but the combination of a low trust score, blocklist presence, and the observed page title supports the crypto‑scam designation. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑hosting attempts on alternative IP ranges, and consider adding the IP 172.67.139.38 to threat intelligence feeds. Ongoing observation of Cloudflare‑hosted assets linked to the same certificate or similar titles is recommended to detect potential resurgence.