tradebtccus[.]com

Analysis of tradebtccus.com shows a high‑confidence indication of malicious activity. The domain was registered on 2025-07-03 through Gname.com Pte. Ltd. and uses Cloudflare nameservers lilith.ns.cloudflare.com and nick.ns.cloudflare.com. DNS resolution points to IP 188.114.97.3, hosted in the United States under ASN 13335 (Cloudflare, Inc.). No SSL certificate is presented, and HTTP responses return a 503 status, suggesting the site is currently offline or deliberately serving error pages.

The page title reported is "BTCC.US," aligning with the known scam type of a crypto‑related scheme. Reputation data is uniformly negative: Gridinsoft assigns a trust score of 0 / 100, PhishDestroy has blocked the domain, and VirusTotal records ten detections out of ninety‑five scanned vendors. The domain also appears on a single external blocklist and is referenced in one AlienVault OTX threat pulse. These signals collectively point to a crypto phishing operation that has been taken down or is temporarily inaccessible.

Uncertainty remains regarding the exact content that was served before the site went offline, as no visual or form details are available. Defenders should continue to block traffic to tradebtccus.com at perimeter filters, add the domain to internal blacklists, and monitor for any re‑hosting attempts that may use the same IP range or similar naming patterns. Ongoing vigilance is advised because the underlying infrastructure—shared Cloudflare IP space—could be reused by other malicious actors.