# qsbitcoin-site.pages.dev — SUSPICIOUS

> Phishing site qsbitcoin-site.pages.dev impersonates Bitcoin. Resolves to IP 172.66.45.31 with 1/95 VirusTotal detections.

## Summary
qsbitcoin-site.pages.dev is a fraudulent website designed to impersonate Bitcoin’s official brand. The page mimics Bitcoin’s branding to trick visitors into entering sensitive information such as login credentials, payment details, or cryptocurrency wallet recovery phrases. Once submitted, this data is captured by attackers for financial theft, account takeovers, or further scams. Users who interact with this page risk losing funds or personal data to fraudsters operating under the guise of a trusted brand. PhishDestroy identifies this domain as an active impersonation threat targeting cryptocurrency users.

This domain was flagged by security vendors with a low detection rate of 1 out of 95 on VirusTotal, indicating limited early recognition despite its malicious intent. It resolves to IP address 172.66.45.31 and is registered through Cloudflare, Inc., leveraging their infrastructure to obscure its true origin. The site holds a valid SSL certificate issued by Google Trust Services, which may further deceive visitors into believing it is a legitimate Bitcoin service. PhishDestroy’s investigation confirms the domain is currently active and engaged in brand impersonation.

If you visited qsbitcoin-site.pages.dev or interacted with it, stop using any accounts accessed from that session immediately. Do not enter personal information, passwords, or cryptocurrency wallet details. Scan your device for malware using updated antivirus software. If you shared a password, change it on a known legitimate site and enable two-factor authentication. Report the domain to your security team or platform provider. Avoid clicking links from unsolicited messages or search results claiming to lead to Bitcoin services.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Bitcoin

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.45.31

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2a541c9a-4392-4a99-bad5-2ec76c5c951f
- PhishDestroy: https://phishdestroy.io/domain/qsbitcoin-site.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/qsbitcoin-site.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/qsbitcoin-site.pages.dev/
Last updated: 2026-03-23