biltbalnk-accoun[.]cc

Analysis of biltbalnk-accoun.cc confirms it as a high-risk phishing domain impersonating Bitbank, a cryptocurrency exchange. The domain was registered on February 21, 2026, through Eranet International Limited and is currently offline. Infrastructure analysis reveals Cloudflare-hosted nameservers (louis.ns.cloudflare.com, romina.ns.cloudflare.com) and resolution to IP 172.67.165.205, located in the US under AS13335 (Cloudflare, Inc.). No SSL certificate was detected, increasing the risk of credential interception.

Detection data shows 16 of 93 security vendors on VirusTotal flagged the domain as malicious, while it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. AlienVault OTX lists it in one threat intelligence pulse. The page title explicitly displays 'Bitbank,' aligning with the reported brand impersonation scam type. Gridinsoft assigns a trust score of 0/100, further indicating malicious intent.

Defenders should treat this domain as confirmed phishing infrastructure. Block access at network and endpoint levels, and monitor for related domains registered through the same registrar or using identical nameserver patterns. While the domain is currently offline, historical resolution data should be reviewed for potential compromise indicators. No evidence suggests this domain is part of a broader campaign beyond the Bitbank impersonation, but correlation with other Cloudflare-hosted phishing domains may reveal additional threats.