btcnovellon[.]com

The domain btcnovellon.com was registered on 18 December 2025 through Dynadot LLC and is currently taken offline. DNS resolution points to the Cloudflare address 172.67.182.185, which belongs to AS13335 (Cloudflare, Inc.) and is hosted in the United States. The domain is served by the authoritative nameservers gloria.ns.cloudflare.com and jermaine.ns.cloudflare.com, and no TLS certificate is presented, indicating an insecure HTTP endpoint. The site’s only visible artifact is the page title “BTC 7.3 Novellon — a blockchain solution delivering superior privacy protocols”, which aligns with the declared scam type of a crypto‑related scheme.

Google Safe Browsing classifies the URL as social‑engineering, and two of ninety‑three VirusTotal scanners have flagged the domain as malicious. The domain appears on a single security blocklist and has been blocked by the PhishDestroy service. Independent reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting a high likelihood of abuse. The brand target is listed as “across”, suggesting the operation may aim to impersonate multiple brands rather than a single recognizable entity.

Because the site is offline, active content cannot be examined, and the specific tactics used (e.g., credential harvesting, malware delivery) remain unknown. Defenders should continue to block the domain at perimeter filters, update URL and IP reputation lists, and monitor for any re‑activation of the underlying Cloudflare IP. Incident response teams should also consider the possibility of related infrastructure sharing the same nameservers or IP range, and enforce strict outbound controls to prevent accidental connections to newly‑registered domains that resolve to Cloudflare addresses without valid TLS. Ongoing vigilance is recommended, especially for users who receive unsolicited communications referencing “Novellon” or related blockchain terminology.