btcclicks[.]com

The domain btcclicks.com is currently offline but was observed hosting a page titled “Bitcoin PTC – Earn BTC for Viewing Ads | BTCClicks”. The title and the declared brand target of Bitcoin indicate a brand‑impersonation campaign that attempts to lure victims with promises of free cryptocurrency earnings. The domain resolves to the IP address 172.67.70.244, which belongs to Cloudflare’s network (AS13335, United States). DNS resolution is provided by the Cloudflare authoritative name servers rita.ns.cloudflare.com and theo.ns.cloudflare.com, confirming the use of Cloudflare’s CDN and mitigation services. The site presented a valid Let's Encrypt certificate (E8), showing that TLS was correctly configured despite the malicious intent.

Intelligence from multiple sources shows a very low trust rating: Gridinsoft assigns a score of 5 / 100, while Scamadviser rates the domain at 30 / 100. The registrar listed is NameCheap, Inc., and the domain was created on 5 April 2013. Threat‑intelligence feeds have recorded the domain in two AlienVault OTX pulses and it appears on one public blocklist. PhishDestroy has already blocked the domain, and the current status is marked as taken offline. VirusTotal analysis indicates that the domain was scanned by 95 security vendors, none of which raised a detection at the time of scanning.

This absence of detections does not constitute evidence of safety and should be interpreted as a lack of current signatures rather than a clean bill of health. The combination of a brand‑impersonation page title, a crypto‑scam classification, low trust scores, and presence on threat‑intel pulses suggests a deliberate attempt to defraud users seeking Bitcoin rewards. Defenders should continue to monitor the IP address 172.67.70.244 for any re‑use, enforce blocklist updates that include btcclicks.com, and consider adding the domain to internal deny lists.