bitcoin-earn[.]cc

bitcoin-earn.cc was registered on May 01, 2026 through a registrar in the United States. The domain is currently classified as high‑risk and remains active. The single page served returns an HTTP 301 redirect and presents the generic title “Welcome to nginx!”, indicating that the site is using a default web server configuration rather than a branded landing page. The hostname resolves to the address 188.114.97.3, which is hosted by a large content‑delivery network operating out of Canada. The site is protected by a TLS certificate issued by a public certificate authority, with the certificate automatically renewed by an ACME service. The presence of a 301 redirect combined with the default server banner suggests the infrastructure is being repurposed for short‑lived campaigns. Multiple threat‑intelligence sources have flagged the domain. It appears on three security blocklists and is listed in an AlienVault OTX pulse. Google Safe Browsing labels it under the SOCIAL_ENGINEERING category. Independent scanning services recorded two positive detections out of ninety‑five scanners on VirusTotal, and a Gridinsoft trust score of 0 / 100. Front‑end analysis reveals the use of Bootstrap, reCAPTCHA, OWL Carousel, jsDelivr, jQuery, FingerprintJS, and a browser‑insights script provided by the CDN provider. For defenders, the immediate action is to block outbound connections to bitcoin-earn.cc and to add the domain to internal URL filtering policies. Monitoring of DNS queries for the associated IP address is advised, as the same host may be reused for other malicious campaigns. Incident response teams should treat any credential or payment information submitted to this site as potentially compromised, and users should be warned about the high likelihood of credential‑harvesting activity. Continuous updates to detection signatures are recommended to capture any variations of the observed page structure.