bitcointradinginvestment[.]com

bitcointradinginvestment.com is an active domain registered on March 19, 2020 via Unstoppable Domains. DNS resolution points to IP 198.251.84.200, which is geolocated to Luxembourg and is listed as belonging to FranTech Solutions. The authoritative name servers are ns4.asurahosting.com and ns5.asurahosting.com, indicating hosting under Asura Hosting infrastructure.

Web requests to the domain return an HTTP 302 redirect to a page titled “Human verification”. The site presents a TLS certificate issued by Let’s Encrypt (R13), confirming a valid certificate chain but offering no brand authentication. The landing page mimics official Bitcoin branding and uses the phrase “Human verification” to entice users into completing a verification step, a common technique in brand‑impersonation campaigns targeting cryptocurrency users.

The domain appears on a single security blocklist and is flagged by PhishDestroy as a known impersonation of Bitcoin. VirusTotal scans show 11 out of 95 security vendors reporting malicious behavior, and the Gridinsoft trust score is 0 out of 100, reflecting a high likelihood of fraudulent activity. These indicators collectively confirm the domain’s involvement in a cryptocurrency‑related scam.

Defenders should block network traffic to 198.251.84.200 and add bitcointradinginvestment.com to URL filtering policies. Email gateways should be tuned to flag messages containing this domain or any links that resolve to the identified IP. Continuous monitoring of TLS certificates issued by Let’s Encrypt for similar brand‑impersonation patterns is advised, and any detections should be escalated to incident response teams for further investigation.