blitco[.]builltt[.]com

The domain blitco.builltt.com was registered through Dynadoc LLC on September 26, 2025 and is associated with the authoritative name servers dns1.geebytesdns.com and dns2.geebytesdns.com. The site hosted a page titled “Bit‑livechain – Home” and was identified as a brand‑impersonation campaign targeting the “base” brand. Infrastructure analysis shows the domain resolves to the IPv4 address 198.23.193.170, which is allocated to AS36352 HostPapa and geolocated to the United States. The hosting environment utilizes LiteSpeed web server software and a client‑side stack that includes particles.js, Bootstrap, Ant Design, Smartsupp, OWL Carousel, jQuery Migrate, and jQuery.

No SSL certificate was observed, indicating that the site was served over plain HTTP. Reputation metrics are extremely poor; the Gridinsoft trust score registers at 0 out of 100 and the domain appears on a single security blocklist. PhishDestroy has confirmed the domain as blocked, and VirusTotal recorded detections from two of ninety‑five scanning engines. The domain was taken offline prior to the reporting date of July 22 2026, and its current status is recorded as offline.

While the available data confirm the technical footprint and the brand‑impersonation intent, the exact nature of the malicious content (for example, credential‑stealing forms or malicious downloads) has not been publicly disclosed. Defenders should continue to monitor the associated IP address and host AS for any re‑use, update URL filtering and domain‑blocking policies to include blitco.builltt.com, and consider adding the IP 198.23.193.170 to network‑level blocklists. Given the low trust score, lack of TLS, and confirmed blocklist presence, the domain should be regarded as a high‑confidence malicious indicator. Ongoing surveillance of related DNS queries, name‑server changes, and any resurgence of the domain is recommended to detect potential repurposing by the threat actor.