bitcoinos[.]name

This domain, bitcoinos.name, is currently classified as a high‑risk Bitcoin brand impersonation campaign. The site returns HTTP 403 responses and presents the page title “Just a moment…”. The domain remains active as of the report date (12 July 2026) and is listed on one public security blocklist. Its primary malicious intent is identified as a cryptocurrency‑related scam that attempts to misuse the Bitcoin brand. Infrastructure analysis shows the domain is hosted behind Cloudflare’s network (AS13335, Cloudflare, Inc.) and resolves to IP 172.67.129.171, located in the United States. Authoritative name servers are heidi.ns.cloudflare.com and jay.ns.cloudflare.com, indicating registration through Cloudflare, Inc. The TLS certificate is issued by Google Trust Services under the WE1 profile, confirming the use of a legitimate certificate chain. Traffic is served over HTTP/3 and Cloudflare Browser Insights, suggesting standard Cloudflare acceleration services. Reputation services assign extremely low trust scores: Scamadviser rates the domain 1/100, and Gridinsoft scores it 0/100. AlienVault OTX references the domain in a single threat‑intelligence pulse, and VirusTotal reports that 8 of 95 security vendors flag the domain as malicious. The domain has been blocked by PhishDestroy and appears on one additional blocklist, reinforcing its malicious status. Defenders should immediately block bitcoinos.name at the network perimeter and add the associated IP address 172.67.129.171 to deny lists. Continuous monitoring of DNS queries for the domain and its Cloudflare name servers is advised, as the infrastructure could be reused for related campaigns. Updating web filtering rules to detect the “Just a moment…” page title and HTTP 403 response pattern can reduce exposure. Organizations that handle Bitcoin‑related assets should treat any traffic to this domain as hostile and enforce strict outbound controls.