bitruz[.]com

The domain bitruz.com was registered on August 03, 2025 through NameSilo, LLC. It is hosted on Cloudflare infrastructure, resolving to IP address 172.67.188.185 which belongs to ASN 13335 (Cloudflare, Inc.) and is geolocated in the United States. The domain employs Cloudflare's default nameservers dara.ns.cloudflare.com and keaton.ns.cloudflare.com and currently presents no SSL certificate, indicating that any service would be delivered over plain HTTP. The public page title observed is “Bitruz - Smart Swap | Secure Trade | P2P”, and the domain is explicitly linked to a brand impersonation campaign targeting Binance. The site has been taken offline, but it remains listed on a single security blocklist and is actively blocked by the PhishDestroy service.

Reputation checks show a Gridinsoft trust score of 0 out of 100 and a Scamadviser score of 1 out of 100, reflecting a high likelihood of malicious intent. VirusTotal reports indicate that the domain has been scanned by 95 security vendors, none of which have raised a detection at the time of analysis, but the absence of detections does not constitute validation of safety. The limited visibility of the site, combined with the low trust scores and the explicit Binance impersonation, suggests that the domain was used for fraudulent activity, possibly to lure cryptocurrency users.

Defenders should continue to block the domain at network perimeter and endpoint layers, incorporate the IP address 172.67.188.185 into threat‑intel feeds, and monitor for re‑registration or re‑activation of the domain or similar look‑alike domains. Ongoing surveillance of Cloudflare‑hosted assets associated with the same ASN is advisable, as threat actors frequently reuse the same infrastructure.