btchubs[.]com

Analysis of btchubs.com, created on October 17, 2023, shows a recently registered domain that is currently active and resolves to the IPv4 address 198.54.115.166. The domain is registered through Internet Domain Service BS Corp. and utilizes the nameservers dns1.namecheaphosting.com and dns2.namecheaphosting.com. The TLS certificate presented is issued by Sectigo Limited under the Sectigo Public Server Authentication CA DV R36, indicating a standard domain‑validated certificate without additional validation.

The domain has been submitted to VirusTotal where 91 scanning vendors have evaluated the site; none reported a detection, but the absence of alerts does not constitute a safety guarantee. btchubs.com appears on a single security blocklist and is actively blocked by the PhishDestroy service, reflecting that at least one threat‑intelligence feed has flagged the domain as malicious. No public page title, brand targeting, or detailed payload information has been disclosed, leaving the exact phishing lure undefined.

Infrastructure observations confirm the domain’s hosting on a shared provider, which is a common tactic for short‑lived phishing sites. Defenders should add the domain and its resolving IP to outbound filtering rules, monitor DNS queries for the associated nameservers, and continue to track any new detections from additional URL or file scanners. Given the lack of comprehensive content analysis, further investigation of the landing page, HTTP response headers, and any observed redirects is recommended to determine the specific credential‑ harvesting or data‑exfiltration mechanisms employed.