bitcoinhyper-claimkyc[.]pages[.]dev

This domain, bitcoinhyper-claimkyc.pages.dev, is flagged as a high-risk brand impersonation targeting Bitcoin, with a page title claiming to offer a crypto presale under the name BTC Hyper Bitcoin L2. The domain was created on September 2, 2025, and remains active as of July 12, 2026. It resolves to IP address 188.114.96.3, hosted in the United States on AS13335 (Cloudflare, Inc.), and uses Cloudflare nameservers. SSL is issued by Google Trust Services. VirusTotal reports 4 of 91 security vendors flagging this domain, and it appears on one security blocklist (PhishDestroy). The Gridinsoft trust score is 0 out of 100, indicating a high likelihood of malicious intent. The site is classified as a crypto drainer, designed to steal cryptocurrency from visitors. Infrastructure analysis shows the use of HSTS, Google Tag Manager, Cloudflare, and HTTP/3. Defenders should block this domain at the network level, monitor for related subdomains or similar naming patterns (e.g., variations of bitcoinhyper-claimkyc), and alert users about the ongoing phishing campaign. No additional details about the landing page content or backend infrastructure are available from the provided intelligence.