greenbitcoin[.]live

Analysis indicates the domain greenbitcoin.live was registered on May 9, 2026, through OwnRegistrar, Inc. and is currently active. The domain impersonates Bitcoin, as explicitly flagged in threat intelligence sources. Infrastructure analysis reveals it resolves to IP 104.21.75.154, hosted on Cloudflare, Inc. infrastructure in Canada, with nameservers ace.ns.cloudflare.com and gloria.ns.cloudflare.com. The SSL certificate is issued by Google Trust Services (WE1). At the time of assessment, the domain returns an HTTP 403 status with the page title 'Just a moment...', suggesting potential access restrictions or a placeholder state. The domain appears in 16 AlienVault OTX threat intelligence pulses and is listed on one security blocklist. No vendor detections were recorded in the most recent scan, though this does not confirm safety. Defenders should treat this domain as suspicious due to its brand-impersonation classification, recent registration, and presence in threat intelligence feeds. Monitoring for changes in HTTP status, page content, or additional blocklist inclusions is recommended. If observed in network logs, connections to this domain should be investigated for potential credential harvesting or fraudulent activity.