bclub[.]us[.]cc

Analysis as of July 25 2026 indicates that bclub.us.cc was registered through Gname.com Pte. Ltd. on March 23 2026. The site presented a page titled “Данный Ñ Ð¾ÑÑ‚Ð¸Ð½Ð³ аккаунт был заблокирован!” and is classified as a credential phishing campaign. The domain resolves to IP address 91.240.20.27, which is geo‑located to the Netherlands and associated with Hooray Solutions Corp. The hosting name servers are a.rsp-dns.com and b.rsp-dns.com. An SSL certificate issued by ZeroSSL (ZeroSSL ECC Domain Secure Site CA) was observed, indicating the site used HTTPS despite its malicious intent. Reputation services show a Gridinsoft trust score of 0 out of 100 and the domain appears on one security blocklist.

VirusTotal scans recorded detections by three of ninety‑four security vendors, confirming that at least a subset of scanners flagged the host as malicious. PhishDestroy has also added the domain to its block list. The current HTTP status is offline, meaning the site is no longer reachable, but the infrastructure artifacts remain observable. Uncertainties include the exact content of the phishing landing page beyond the title, the specific credentials targeted, and whether additional infrastructure such as command‑and‑control servers or data‑exfiltration endpoints is linked to the same IP address.

No open‑source threat‑intel feeds were cited, so the broader threat landscape context is limited. Defenders should continue to block the domain and its IP at perimeter controls, update DNS‑based filtering lists with the observed nameservers, and monitor for any resurgence of the host. Incident response teams should treat any credentials submitted to this domain as compromised and advise affected users to reset passwords immediately. Ongoing threat‑intel collection is recommended to detect any re‑registration attempts or related domains using the same registrar or hosting provider.