the-bitcoin-union-pro[.]com

The domain the-bitcoin-union-pro.com is actively hosting a site that claims the platform has been seized, as indicated by the page title "Diese Plattform wurden beschlagnahmt / This platform have been seized". The site resolves to the IPv6 address 2600:9000:20aa:b800:15:b519:8f00:93a1, which belongs to Amazon.com, Inc. (AS16509) and is located in the United States. The certificate presented is an Amazon‑issued RSA‑2048 certificate, confirming that the infrastructure is provisioned through Amazon Web Services, specifically Amazon S3 and CloudFront, as reflected in the detected technologies and the four AWS name servers listed. The domain was registered on 30 September 2020 through Amazon Registrar, Inc. and currently returns HTTP 200. Intelligence flags the site as a brand‑impersonation of Bitcoin and categorises the scam as cryptocurrency‑related. It appears on one security blocklist and has been flagged by PhishDestroy; Gridinsoft assigns a trust score of 0 / 100, and one of ninety‑five VirusTotal scanners reported a detection. The risk rating is high and the status remains active. Defenders should block the domain at perimeter and DNS layers, monitor the associated IPv6 address for any additional malicious activity, and add the name servers to any existing AWS‑related watchlists. Because the site uses legitimate cloud services, any takedown request should be directed to the hosting provider with evidence of brand infringement. Ongoing observation is advised to detect possible pivoting to other Bitcoin‑related impersonation campaigns.