gbtc-vip[.]com

The domain gbtc-vip.com is a generic phishing site designed to conduct crypto scams, posing an elevated risk to users. It does not impersonate a specific brand but operates as a standalone fraudulent platform targeting cryptocurrency holders. As of the latest verification, gbtc-vip.com has been taken offline, though its prior activity remains a concern for potential victims.

Technical indicators confirm the malicious nature of gbtc-vip.com. The domain was flagged by 2 of 95 VirusTotal security vendors, including CRDF and Gridinsoft, which assigned it a trust score of 0/100. It appears on one security blocklist (PhishDestroy) and was registered through NameCheap, Inc. on September 11, 2025. The site resolved to IP address 188.114.97.3, hosted by Cloudflare (AS13335) in the US, and lacked an SSL certificate. Detected technologies included JivoChat, Cloudflare, and HTTP/3. MX records pointed to Google’s mail servers, while nameservers were managed by Cloudflare (carrera.ns.cloudflare.com and elliott.ns.cloudflare.com).

Users who interacted with gbtc-vip.com should immediately revoke any token approvals granted to the site and transfer remaining funds to a new, secure wallet. Monitor transaction histories for unauthorized activity and enable two-factor authentication on all cryptocurrency accounts. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybercrime authorities to aid in takedown efforts and prevent further victimization.