fed-btc[.]com

Analysis of the domain fed-btc.com indicates confirmed phishing infrastructure associated with cryptocurrency fraud. The domain, created on February 21, 2026, resolves to the IP address 188.114.97.3, which is hosted on Cloudflare's network (AS13335) in the United States. Despite its current offline status, the domain has been flagged by 13 of 93 security vendors on VirusTotal, suggesting prior malicious activity. It also appears on at least one security blocklist, specifically PhishDestroy, reinforcing its classification as a crypto scam.

The domain's SSL certificate is classified as WE1, a low-trust indicator often associated with short-lived or disposable certificates. The observed HTTP response—a 404 Not Found page—does not rule out prior malicious use, as phishing infrastructure frequently cycles through active and inactive states to evade detection. No specific brand impersonation or phishing kit details are available in the current evidence, limiting further attribution beyond its designation as a crypto scam. Defenders should treat this domain as high-risk infrastructure.

Network-level blocking of the IP 188.114.97.3 and monitoring for re-activation are recommended. Given the domain's creation date and detection history, it may re-emerge under similar or altered infrastructure. Security teams should correlate this domain with other crypto-themed phishing campaigns, particularly those leveraging Cloudflare-hosted endpoints.