testesttest[.]pages[.]dev

This domain, testesttest.pages.dev, is actively engaged in brand impersonation targeting Bitcoin.com, a well-known cryptocurrency platform. The specific threat involves the promotion of a fraudulent VERSE token, misleading users into believing they are interacting with a legitimate financial product associated with Bitcoin.com. The domain remains active and poses a high risk to individuals seeking cryptocurrency investments or financial services. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., and resolves to the IP address 172.66.44.151, located in Canada. It appears on two security blocklists, including PhishDestroy and ScamSniffer, and is flagged by 3 of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services (WE1), and the domain was created on April 13, 2026, indicating a recent and potentially suspicious registration. The page title, 'VERSE Token: Enabling financial self-reliance | Bitcoin.com,' directly mimics the branding of the legitimate Bitcoin.com platform, further confirming its deceptive intent. Current status indicates the domain is still active, and users are advised to exercise extreme caution. Immediate actions include blocking the domain at the network level, reporting it to relevant security teams, and avoiding any interaction with its content. Organizations should update their threat intelligence feeds to include this domain and its associated indicators, such as the IP address 172.66.44.151 and the SSL certificate issuer. Users who may have engaged with this domain should monitor their accounts for unauthorized activity and consider revoking any permissions granted to suspicious applications or services.