bitcoinxyz[.]pages[.]dev

This domain, bitcoinxyz.pages.dev, is actively flagged as a high-risk Bitcoin impersonation scam. Registered on March 22, 2026, through Cloudflare, it resolves to 172.66.44.149 (Cloudflare, Inc., CA) and remains operational with an HTTP 200 status. The page title, 'Bitcoin - The Currency Of The Future, Available Now,' explicitly targets Bitcoin users, aligning with the classified scam type of 'Crypto Scam.' Infrastructure analysis reveals the use of Cloudflare nameservers (rocco.ns.cloudflare.com, vita.ns.cloudflare.com), HSTS, HTTP/3, and Bootstrap, alongside a Google Trust Services SSL certificate (WE1). The domain appears on one security blocklist and is detected by 5 of 94 vendors in VirusTotal scans, indicating partial but not universal recognition of its malicious nature. Defenders should note that the domain's hosting on Cloudflare Pages (.pages.dev) provides a low-cost, ephemeral platform often exploited for phishing. The combination of Bitcoin branding, crypto scam classification, and active status suggests intent to deceive users into fraudulent transactions or credential submission. While the exact mechanics of the scam (e.g., wallet drainer, fake exchange) are not confirmed, the page title implies a focus on Bitcoin availability or investment opportunities. No evidence of takedown requests or sinkholing is present, and the domain remains accessible as of July 12, 2026. Recommended actions include blocking the domain at DNS or proxy levels, monitoring for related subdomains or IP reuse, and alerting users to the Bitcoin impersonation risk. Given the domain's age (under four months) and persistent activity, it may represent a short-lived campaign, but defenders should prioritize containment due to the high-risk classification.