bitccoinvn[.]io

This domain, bitccoinvn.io, is flagged as an active high-risk phishing site targeting users of the 1inch decentralized exchange platform. Registered on November 13, 2025, through NiceNIC International Group Co., Limited, the domain remains operational as of July 12, 2026. Analysis indicates it impersonates 1inch, though the exact content of the site has not been reviewed. The page title, 'Instant Bitcoin & Cryptocurrency Exchange in Vietnam - BitcoinVN,' suggests an attempt to mislead users into believing it is a legitimate cryptocurrency exchange service, potentially facilitating credential theft or fraudulent transactions. Infrastructure analysis reveals the domain resolves to IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services, which may lend an appearance of legitimacy. Despite this, the domain appears on five security blocklists, including entries from Polkadot, Codeesura, PhishDestroy, Enkrypt, and BLP-Malware. AlienVault OTX records show the domain in 23 threat intelligence pulses, indicating prior identification by security researchers. Notably, VirusTotal reports zero detections out of 95 engines, which does not confirm safety but may reflect limited visibility or evasion techniques. The domain's registration age, combined with its presence on multiple blocklists and threat intelligence platforms, suggests a deliberate effort to deceive users. Defenders should treat bitccoinvn.io as malicious and prioritize blocking or monitoring traffic to this domain. Network-level protections, such as DNS filtering or firewall rules, are recommended to prevent user interaction. Security teams should also review logs for any connections to 188.114.96.3 or related domains registered through the same provider, as additional malicious infrastructure may exist. Given the domain's active status and brand impersonation, users should be alerted to avoid engagement until further analysis confirms its removal or takedown.