en-bitcoinhyper-orgsjq[.]pages[.]dev

Analysis of en-bitcoinhyper-orgsjq.pages.dev shows a newly registered domain (April 14, 2026) that resolves to Cloudflare‑owned IP 188.114.96.3 in Canada. The site serves over HTTPS with a Google Trust Services certificate, implements HSTS, and supports HTTP/3, confirming modern web infrastructure. The page title "Bitcoin Hyper: Presale Token & Project Overview" directly references the Bitcoin brand, and the classified threat type is brand impersonation, indicating an attempt to mislead users into believing the page is associated with the legitimate cryptocurrency. The domain is currently active, listed on a single security blocklist, and has been blocked by PhishDestroy. Gridinsoft assigns a trust score of 0/100, a strong indicator of malicious intent. No additional intelligence such as payload samples, phishing kits, or user‑submitted reports is available, so the precise scam mechanics remain unclear. Defenders should treat the domain as hostile, block network resolution to 188.114.96.3, and add the hostname to URL filtering rules. Continuous monitoring for any changes in content or additional indicators is advised, as the investigation remains ongoing.