bltcoin-bank[.]com

Analysis of bltcoin-bank.com, observed on July 24, 2026, shows a domain created on February 21, 2026 and registered through REALTIME REGISTER B.V. The domain resolves to the Cloudflare address 172.67.198.38, associated with ASN 13335 in the United States. Its authoritative nameservers are colette.ns.cloudflare.com and donovan.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and edge services. No TLS certificate is presented, meaning the site does not offer HTTPS encryption. The page title returned before the site was taken offline reads “Bltcoin Bank – Plataforma Oficial | Trading IA 2026”, which aligns with the declared scam type of banking phishing.

VirusTotal scans show three of ninety‑three security vendors flag the domain as malicious, providing limited but consistent vendor‑level detection. The domain appears on three public blocklists and is explicitly listed by PhishDestroy, MetaMask, and SEAL as a known phishing source. An AlienVault OTX pulse also references the domain, confirming its inclusion in threat‑intel feeds. Current status is offline, so live content cannot be inspected, and the lack of an SSL certificate prevents verification of any transport‑level security.

Defenders should treat the domain as hostile: block DNS resolution, add the IP address to network‑level deny lists, and ensure URL filtering solutions ingest the three blocklist identifiers. Continuous monitoring is advised in case the infrastructure is re‑hosted or the domain is re‑activated under a different IP. Because the site’s content has not been captured, investigators should seek archived snapshots to confirm the phishing vector and collect forensic evidence if the domain resurfaces.