btc-exchange-nokyc[.]com

PhishDestroy has flagged btc-exchange-nokyc.com as an active, generic phishing domain designed to deceive users into believing it offers no-KYC cryptocurrency trading, a common lure to bypass regulatory compliance checks. The threat level remains under investigation; however, the domain’s recent creation and low detection rate indicate it is a high-risk asset that warrants immediate scrutiny. Users should refrain from interacting with the site, as it poses a direct risk of financial fraud and credential theft. This domain was flagged with the following attributes: it resolves to IP address 104.21.86.168, was registered through SOLLUTIUM LLC on January 26, 2026, and operates with a valid SSL certificate issued by Google Trust Services. VirusTotal currently shows 0 detections out of 95 security engines, and no active listings on major blocklists have been identified at this time. Despite the lack of immediate blocklist coverage, the domain’s alignment with known phishing tactics—particularly the promise of anonymous crypto trading—strongly suggests malicious intent. The combination of a freshly minted domain, low detection metrics, and infrastructure choices further elevates its threat profile. Mitigation for this threat requires a multi-faceted approach tailored to phishing campaigns targeting financial services. Users should blacklist the domain and IP address at the network perimeter to prevent access. Organizations are advised to push browser-level blocking via group policy or endpoint protection platforms using IOCs such as the domain name and resolving IP. For individuals, refrain from entering personal or financial data on the site. Report the domain to your exchange provider and relevant cybersecurity forums. Monitor outbound DNS queries for additional campaign domains and update IDS/IPS signatures with the latest YARA and Snort rules using seed identifier 7804b9. Always verify the legitimacy of financial platforms through official channels before engaging.