bhtelecoms[.]top

The domain bhtelecoms.top has been identified as a generic phishing threat, posing risks of credential theft and data compromise. No specific brand impersonation or drainer kit has been associated with this domain, but its structure and behavior align with typical phishing campaigns designed to harvest sensitive information from unsuspecting victims.

Technical indicators reveal a concerning profile: VirusTotal reports a detection rate of 3 out of 95 security vendors, indicating some but not widespread recognition. The domain was registered through Spaceship, Inc., and resolves to IP address 43.153.72.244. Its creation date is May 13, 2026, suggesting a relatively recent setup. The domain currently does not appear on Google Safe Browsing (GSB) lists, but it is listed on 3 security blocklists. An SSL certificate from Let's Encrypt (R12) was observed, though the domain is now offline. Additionally, AlienVault OTX records show its presence in 1 threat intelligence pulse.

The domain has been taken offline, which mitigates direct risk. However, the recent creation date and moderate security vendor detection suggest that it may have been used in limited or targeted campaigns. Users should remain cautious of any emails or messages referencing bhtelecoms.top and ensure that access is blocked via DNS filtering or security tools. PhishDestroy recommends monitoring for similar domains using the same infrastructure or patterns.