frameworkv1[.]pages[.]dev

PhishDestroy identifies frameworkv1.pages.dev as a high-risk brand impersonation threat specifically targeting the Bitcoin brand. This domain is actively engaged in phishing activities designed to deceive users into believing they are interacting with legitimate Bitcoin-related services, potentially leading to theft of cryptocurrency credentials or funds.

The domain was registered through Cloudflare, Inc. and resolves to IP address 172.66.44.146. VirusTotal analysis shows 2 out of 95 security vendors flag this domain as malicious, and it appears on 2 security blocklists. The domain was created on April 21, 2026, and its SSL certificate is issued by Google Trust Services / WE1. The page title observed is "VERSE Token: Enabling financial self-reliance | Bitcoin.com," which mimics the legitimate Bitcoin.com brand to lure victims. These technical indicators collectively confirm the domain's malicious intent.

Users who encounter frameworkv1.pages.dev should immediately close the page and never enter any personal or financial information. To mitigate the threat, report the domain to Google Safe Browsing and your email provider as phishing. Enable two-factor authentication on all cryptocurrency accounts and monitor for unauthorized transactions. Security teams should block the domain at the network level and add it to threat intelligence feeds to prevent future access.