# greenbitcoin-io.pages.dev — SUSPICIOUS

> PhishDestroy identifies greenbitcoin-io.pages.dev as a Bitcoin brand impersonation site. It resolves to 172.66.46.211. Check the full report.

## Summary
PhishDestroy identifies greenbitcoin-io.pages.dev as an active brand impersonation campaign targeting Bitcoin users. The domain is likely used for phishing attacks, attempting to steal credentials or private keys from unsuspecting victims by mimicking a legitimate Bitcoin service or communication.

Technical analysis reveals the domain has a VirusTotal score of 0/95, indicating it's a newly observed threat. The domain is registered through Cloudflare, Inc. and resolves to IP address 172.66.46.211. It is not yet listed on any major blocklists. The Google Safe Browsing (GSB) status is currently unknown.

The domain is currently active and under investigation. Immediate response actions include adding the domain to blocklists and monitoring for related activity. Users are advised to exercise caution when interacting with any website or communication claiming affiliation with Bitcoin, and to verify the legitimacy of the source before providing any sensitive information. Further investigation is ongoing to determine the full scope and impact of this phishing campaign.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Bitcoin

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.46.211

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- PhishDestroy: https://phishdestroy.io/domain/greenbitcoin-io.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/greenbitcoin-io.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/greenbitcoin-io.pages.dev/
Last updated: 2026-03-26