bitline[.]builltt[.]com

The domain bitline.builltt.com was registered on September 26, 2025 through Dynadot LLC and is currently taken offline. Infrastructure analysis shows it resolves to the IP address 198.23.193.170, which belongs to HostPapa (AS36352) in the United States. The domain uses the authoritative name servers dns1.geebytesdns.com and dns2.geebytesdns.com. No SSL certificate is presented, indicating that the site does not provide encrypted communications. A scan on VirusTotal recorded three detections out of ninety‑five security vendors, confirming that at least a minority of scanners consider the host malicious.

The site is listed on a single security blocklist and has been blocked by the PhishDestroy service. Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the low credibility of the domain. The page title returned from the site, "Bitline – Crypt Bitc & ALts," suggests content related to cryptocurrency, but the site’s content has not been publicly examined. Detected web technologies include WordPress, MySQL, PHP, Bootstrap, LiteSpeed, Smartsupp, OWL Carousel, and jQuery, a stack commonly found in compromised or malicious sites.

The domain is explicitly classified as a brand‑impersonation scam targeting the Signal brand. Defenders should treat any traffic to this host as hostile, block the domain and its IP at perimeter defenses, and monitor for related indicators such as the listed name servers and the HostPapa hosting ASN. Because the site is offline, active exploitation cannot be observed, but the presence of multiple detections, a zero trust score, and a brand‑impersonation label indicate a persistent threat that could be re‑activated. Continuous observation of the domain’s registration status and any re‑appearance of content is advised.