bitigetbtc[.]com

Analysis as of July 27 2026 indicates that the domain bitigetbtc.com was registered on May 06 2026 through Name SRS AB and is currently active. The authoritative name servers listed are a.share-dns.com, a7.share-dns.com, b.share-dns.net, and b7.share-dns.net, which are commonly used by fast‑flux or shared‑hosting services. DNS resolution points to the IPv4 address 128.241.241.34; no additional A or AAAA records were observed. The hosting provider and ASN for this IP are not disclosed in the available data, and geolocation suggests the address resides in a data‑center environment, a pattern often leveraged by malicious operators to hide behind reputable infrastructure. Reputation checks show that the domain is listed on one public security blocklist and is explicitly blocked by the PhishDestroy feed, confirming that at least one defensive organization has identified it as malicious.

VirusTotal has recorded 12 positive detections out of 91 submitted scanners, reinforcing the classification as a high‑risk host. No Safe Browsing, Open Threat Exchange, or Google Transparency reports were found for this domain at the time of analysis, and no SSL/TLS certificate details or HTTP response codes are publicly available, limiting visibility into the transport security posture. The limited public evidence does not disclose the exact landing page content, page title, or any brand impersonation, so the specific phishing lure (e.g., cryptocurrency wallet, exchange login) remains unconfirmed. However, the domain name itself contains the token “btc”, a common indicator of cryptocurrency‑related scams, and the high detection count aligns with typical crypto‑drainer campaigns. Defenders should block bitigetbtc.com at the network perimeter and add it to endpoint allow‑list exclusions.

Monitoring of DNS queries for the four shared name servers can help identify additional domains that may be using the same infrastructure.