strategy-btc[.]icu

The domain strategy-btc.icu was registered through NiceNIC International Group Co., Limited and first observed on February 27, 2026. It is hosted on Cloudflare infrastructure, using the nameservers grace.ns.cloudflare.com and guss.ns.cloudflare.com, and resolves to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The site presents a page titled "Strategy – The Biggest Crypto Giveaway" and is classified as a fake airdrop scam, a common vector for cryptocurrency phishing. No SSL certificate was detected for the domain, indicating that traffic was likely served over plain HTTP.

Threat intelligence feeds have listed the domain on three security blocklists—PhishDestroy, MetaMask, and SEAL—demonstrating that multiple anti‑phishing services have recognized it as malicious. VirusTotal analysis shows that five of ninety‑three scanning engines flagged the domain, providing additional corroboration of its malicious nature. As of the report date, July 24, 2026, the domain is reported offline, which may be a temporary takedown or a shift in the attacker’s infrastructure.

Nonetheless, the observed indicators—including the registrar, hosting provider, IP address, lack of TLS, blocklist listings, and the specific scam narrative—should be incorporated into defensive tooling. Organizations are advised to add strategy-btc.icu to domain deny lists, monitor traffic to its associated IP range for any resurgence, and ensure that users are warned about unsolicited crypto giveaway communications that reference the "Strategy" branding. Continuous re‑evaluation is recommended, as the threat actor may reactivate the domain or deploy a new host under similar naming conventions.