bitcoinminetrix-app[.]pages[.]dev

bitcoinminetrix-app.pages.dev is a newly registered domain (created 30 April 2026) that hosts a page titled “Bitcoin Minetrix | Stake BTCMTX On Ethereum To Mine BTC”. The site is served through Cloudflare (nameservers margot.ns.cloudflare.com, mario.ns.cloudflare.com) and resolves to IP 172.66.44.77, an address associated with Cloudflare’s network in Canada. The TLS certificate is issued by Google Trust Services (WE1), indicating a valid HTTPS connection but not authenticating the underlying operator. Infrastructure fingerprinting shows the use of common front‑end libraries (Unpkg, jsDeliver, SweetAlert2, crypto‑js, CDNJS) and Google Tag Manager, as well as HTTP Strict Transport Security. Reputation metrics are extremely low: Scamadviser scores 11/100, Gridinsoft 0/100, and the domain appears on three security blocklists (PhishDestroy, ScamSniffer, Enkrypt). The listed scam type is “Brand Impersonation” targeting the Bitcoin brand, consistent with the page title that suggests a staking service for a token called BTCMTX. No malware detections have been reported by VirusTotal, but the absence of detections does not confirm safety. At present, no further content analysis is available, so the exact malicious functionality (e.g., credential harvesting, payment diversion) cannot be confirmed. Defenders should block the domain at network perimeter, add the associated IP and nameservers to deny lists, and monitor for any traffic attempting to retrieve the listed JavaScript resources. Continuous observation of Cloudflare‑derived domains with low trust scores and brand‑impersonation indicators is recommended.