bitcoin-wallet-v1[.]org

This domain, bitcoin-wallet-v1.org, is flagged as an active brand impersonation threat targeting Bitcoin wallet users. Analysis indicates the site mimics legitimate Bitcoin wallet services, likely aiming to harvest login credentials or cryptocurrency wallet recovery phrases. The domain presents itself under the page title 'Bitcoin Wallets,' a direct attempt to deceive users into believing it is an official or trusted platform for managing Bitcoin assets. Infrastructure analysis reveals the domain was registered on April 11, 2026, through Web Commerce Communications Limited dba WebNic.cc. It resolves to the IP address 188.114.97.3 and employs Cloudflare services, including Cloudflare Browser Insights and HTTP/3, to obfuscate its true origin and enhance performance. Detection metrics show the domain is flagged by 14 out of 95 security vendors on VirusTotal, appears on one security blocklist, and holds a Gridinsoft trust score of 0/100. Additionally, it has been identified in a single threat intelligence pulse on AlienVault OTX, further corroborating its malicious intent. As of the latest assessment, bitcoin-wallet-v1.org remains active and poses an elevated risk to users. The domain has been blocked by at least one security filter, but its continued operation indicates ongoing threats. Users are advised to avoid interacting with the domain, and organizations should update their blocklists to include this domain and its associated IP address. Given the use of Cloudflare and the domain's recent registration, monitoring for similar domains registered through the same registrar or resolving to the same IP range is recommended to mitigate further risks.