earn[.]bittensor-ai[.]us

The domain earn.bittensor-ai.us was registered on 21 February 2026 and was observed hosting a page titled “Bittensor | Earn”. Analysis indicates the site was used to impersonate the cryptocurrency platform Compound, fitting the classification of a crypto‑scam. VirusTotal recorded four detections out of ninety‑three scanned security vendors, confirming malicious activity. The TLS certificate is identified as R13, and the site resolved to the Amazon‑owned IP address 216.150.1.65, which belongs to ASN 16509 (Amazon.com, Inc.) located in the United States.

Threat intelligence feeds have listed the domain on five security blocklists, and it is actively blocked by PhishDestroy, ScamSniffer, Polkadot, Enkrypt and Codeesura. A Gridinsoft trust score of zero out of one hundred further reflects its malicious nature. The site is currently offline, but the historical footprint remains relevant for detection and mitigation.

Defenders should ensure the domain is added to local deny lists, block the associated IP address, and monitor for any re‑registration attempts or similar sub‑domains that target Compound users. Continuous observation of the Amazon AS16509 range for anomalous traffic patterns is advised, as well as leveraging the existing blocklist entries to prevent client exposure. At present, no additional page content has been published, and further technical details such as HTTP response codes or payload inspection are unavailable.