bitcoin-treff[.]com

bitcoin-treff.com is currently listed on one security blocklist and is actively blocked by the PhishDestroy feed. VirusTotal reports that 2 of 91 scanned security vendors have flagged the domain, confirming its malicious reputation despite a relatively low detection count. The domain resolves to the authoritative name servers ns73.domaincontrol.com and ns74.domaincontrol.com, both operated by GoDaddy, and was registered through Mesh Digital Limited. An HTTP 301 response is observed, indicating that the site redirects clients to another location, a technique commonly employed in phishing campaigns to evade initial detection.

The domain remains active as of the report date (July 26, 2026) and continues to be reachable. No additional intelligence such as hosting IP, SSL certificate details, or page title has been disclosed at this time. The threat classification for bitcoin-treff.com is identified as generic phishing, and the risk assessment assigned by the reporting system is high. The domain's activity status is marked as active, indicating that the infrastructure is still operational and may be used to deliver credential‑stealing pages or fraudulent payment requests.

Although the current detection footprint is modest, the combination of blocklist inclusion, active blocking by PhishDestroy, and the presence of redirection behavior elevates the likelihood of malicious use. Operators of enterprise networks should consider adding the domain to threat intelligence feeds, enforce strict outbound filtering, and apply host‑based intrusion prevention rules that alert on any HTTP request resulting in a 301 response from this host. Logging of DNS queries to the associated name servers can provide early indicators of compromise. Given the limited public data, ongoing surveillance of VirusTotal scans, threat‑intel sharing platforms, and any newly reported sightings is essential to adjust defensive posture promptly.