btc-ex[.]org

This domain, btc-ex.org, is flagged for brand impersonation targeting Ethereum, a major cryptocurrency platform. Analysis indicates the site mimics legitimate exchange services, presenting itself as a cryptocurrency investment and trading platform under the title 'BTC-ex.org - Invest and exchange cryptocurrency.' No explicit drainer kit signatures were identified, but the domain exhibits characteristics consistent with phishing infrastructure designed to deceive users into disclosing credentials or transferring assets.

Technical indicators reveal the domain was registered on March 30, 2021, through NameCheap, Inc., and resolves to the IP address 172.67.163.128. VirusTotal reports 0 detections out of 95 engines, suggesting the domain has not yet been widely flagged by automated systems. The domain appears on a single security blocklist and is currently associated with an SSL certificate issued by Google Trust Services. Infrastructure analysis further identifies the use of Cloudflare, HTTP/3, Google Analytics, Hotjar, jsDelivr, and UIKit, which are commonly leveraged to obfuscate malicious activity or enhance user tracking.

As of the latest assessment, btc-ex.org has been taken offline, likely in response to detection by security mechanisms such as PhishDestroy. However, residual risk persists due to the domain's historical activity and the potential for re-registration or migration to alternative infrastructure. Organizations and individuals are advised to monitor for related indicators of compromise, including the IP address 172.67.163.128 and associated SSL certificates. Blocking or sinkholing the domain at the network level is recommended to prevent accidental exposure, and users should be educated on recognizing impersonation tactics targeting cryptocurrency platforms.