greenbisquit[.]live

The domain greenbisquit.live was registered on May 18, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and currently resolves to the IP address 188.114.97.3. HTTP requests return a 200 status code and the page title is "Green Bisquit | Official Platform for AI Assisted Trading". The site is still active as of July 12, 2026. Infrastructure analysis shows the domain is served via Cloudflare, indicated by the nameservers adi.ns.cloudflare.com and leland.ns.cloudflare.com and the IP’s geolocation in Canada under Cloudflare, Inc. The site presents a TLS certificate issued by Let’s Encrypt (E7) and leverages modern delivery stacks including Unpkg, jsDelivr, jQuery, Cloudflare Browser Insights and HTTP/3. Threat intelligence flags the domain on one security blocklist and it is listed in a single AlienVault OTX pulse. Gridinsoft assigns a trust score of 0 out of 100, suggesting a high likelihood of malicious intent. Although VirusTotal currently reports zero detections across 95 engines, the low trust score and blocklist presence indicate that the site is being used for a targeted phishing campaign aimed at users interested in AI‑assisted trading platforms. Defenders should treat greenbisquit.live as a confirmed phishing vector. Immediate actions include adding the domain and its resolving IP to outbound and inbound deny lists, monitoring DNS queries for the associated Cloudflare nameservers, and deploying URL filtering rules that block access to the page title content. Continuous re‑scanning is advised to capture any future detections as threat feeds evolve.