btcevent[.]us

Analysis of the domain btcevent.us, observed as offline at the time of this report (23 July 2026), indicates a high‑risk crypto phishing operation. The site returned a HTTP 404 Not Found page title and did not present an SSL certificate, suggesting that any credential‑harvesting pages were removed or the hosting was taken down. Infrastructure data show the domain resolves to IP 172.67.167.99, which belongs to Cloudflare, Inc. (AS13335) and is located in the United States. The IP is shared by many legitimate services, but the association with the domain does not mitigate the malicious intent observed elsewhere. Reputation signals confirm malicious behavior.

The domain appears on one security blocklist and is specifically blocked by PhishDestroy. Google Safe Browsing classifies it as a social‑engineering threat, and AlienVault OTX includes the domain in a single threat‑intel pulse. The Gridinsoft trust score is 0 / 100, and VirusTotal recorded detections from 16 of 93 scanning engines, reinforcing the high‑risk assessment. The identified scam type is a crypto scam, which aligns with the “btcevent” naming pattern often used to lure victims into fraudulent cryptocurrency transactions. While the current offline status limits immediate observation of malicious content, the combination of blocklist presence, low trust score, multiple vendor detections, and the specific crypto‑scam classification provides sufficient evidence to treat btcevent.us as a confirmed phishing indicator.

Defenders should ensure that the domain is added to network‑level deny lists and that the associated IP address is monitored for any future re‑registration or hosting of malicious payloads. Security information and event management (SIEM) rules ought to flag any DNS queries for btcevent.us, and intrusion‑prevention systems should block HTTP/HTTPS traffic to the resolved IP.