btdconsultingservices[.]com

Analysis of www.btdconsultingservices.com indicates that the domain was registered through NameCheap on February 21, 2026. The site presented the page title “SparkleClean: Macbook Cleaning and Maintenance,” suggesting an attempt to masquerade as a legitimate Macbook cleaning service. No SSL certificate is present, and the HTTP service has been taken offline at the time of analysis (July 24, 2026). The domain resolves to 138.226.237.160, an address allocated to AS205775 (NEON CORE NETWORK LLC) in Germany. Nameserver configuration includes ns1.mddservices.com, ns2.mddservices.com, ns1.supportedns.com, and ns2.supportedns.com, a pattern observed in other malicious infrastructure.

VirusTotal scanned the host and recorded detections from 2 of 93 security vendors, confirming that at least a minority of scanners flag the site as malicious. Gridinsoft assigned a trust score of 0 out of 100, indicating a highly untrusted reputation. The domain appears on a single public blocklist and is listed by the PhishDestroy blocking service. The combination of a recent registration, lack of TLS, low trust scores, and detections by multiple vendors aligns with the classification of a generic phishing operation.

Uncertainty remains regarding the specific phishing kit or the exact victim vector, as no additional forensic artifacts such as login forms or credential‑stealing scripts have been disclosed. Defenders should block the domain at network perimeters, update DNS and proxy blocklists with the observed IP and nameserver entries, and monitor for any future re‑hosting of the same content. Continuous re‑scanning with VirusTotal and other sandbox services is recommended to capture any evolving payloads. Organizations that rely on Macbook maintenance services should remain vigilant for unsolicited communications referencing “SparkleClean,” and educate users to verify URLs before providing credentials or personal information.