btxmcc[.]com

Analysis of btxmcc.com shows that the domain is currently active and has been identified as a generic phishing vector. The domain resolves to the IP address 188.114.96.3 and is hosted on Cloudflare infrastructure, as indicated by the authoritative nameservers samara.ns.cloudflare.com and wilson.ns.cloudflare.com. Registration records reveal that the domain was created on May 11, 2009 and was registered through Gname.com Pte. Ltd., a registrar that does not provide additional protective controls.

The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one external mitigation platform has recognized malicious intent. VirusTotal reports that the domain has been scanned by 95 vendors, with no current flags; however, the absence of detections does not constitute assurance of safety, and the lack of a detection record may reflect limited analysis rather than benign behavior. No further intelligence such as SSL certificate details, HTTP response codes, page titles, or brand targeting is available at this time, leaving the exact phishing payload and victim profile uncertain.

Defenders should treat btxmcc.com as a high‑confidence phishing indicator: the domain should be added to network deny lists, DNS filtering rules, and endpoint protection blocklists. Continuous monitoring of the IP 188.114.96.3 for any changes in reputation, as well as periodic re‑scanning with multi‑vendor services, is recommended to capture any future malicious activity. Because the domain remains active, proactive blocking is advised to mitigate potential credential harvesting or credential‑stealing campaigns that may leverage this infrastructure.