green-bitcoin[.]io

The domain green-bitcoin.io has been identified as a brand impersonation phishing site that specifically targets the Coinbase brand. It poses an elevated risk to users and has been taken offline. The site previously promoted the Green Bitcoin $GBTC token and was flagged as a scam, particularly for wallet connect phishing. Users who may have interacted with this site should take immediate steps to secure their accounts and funds.

1 of 95 VirusTotal vendors, including Gridinsoft, detected green-bitcoin.io as malicious, while it was not flagged by Google Safe Browsing. The domain is registered through arin and resolves to the IP address 2a06:98c1:3120::3, which is located in the US and is associated with AS13335 Cloudflare, Inc. It appears on 1 security blocklist, specifically PhishDestroy, and was observed to have a single nameserver. The site did not have an SSL certificate, which is a common indicator of a lack of security and authenticity.

To mitigate the risks associated with green-bitcoin.io, users who have connected their wallets should revoke any token approvals and move their funds to a new, secure wallet. For those who may have entered login credentials, it is crucial to change passwords immediately and enable two-factor authentication (2FA) on all affected accounts. Users should also monitor their accounts for any unauthorized transactions or activity. If you suspect that you have been a victim of this phishing scam, report the incident to your cryptocurrency exchange and any relevant security organizations or authorities.