bitcoinhyper[.]sbs

This report provides a detailed investigation into the domain bitcoinhyper.sbs, which is currently active and involved in a brand impersonation phishing campaign targeting the Bitcoin brand. The domain was registered on July 20, 2025, through Dynadot LLC. Infrastructure analysis reveals that the domain is hosted in the United States under the AS13335 Cloudflare, Inc. network. The SSL certificate is issued by Let's Encrypt, specifically under the R13 root. When accessed, the page title is 'Nur einen Moment…', suggesting a brief loading or redirection process, but the exact content of the page has not been analyzed further.

The HTTP status of the domain is 200, indicating that it is actively responding to web requests. The domain has been flagged by one security blocklist and has a Gridinsoft trust score of 0 out of 100, which indicates a high level of suspicion. Analysis indicates that the domain is associated with a crypto scam, specifically an airdrop scam, which is a common tactic used to trick users into providing sensitive information or making unauthorized transactions. The domain uses modern web technologies such as Bootstrap, jQuery, and HSTS, and is protected by Cloudflare.

Defenders should be vigilant and consider blocking traffic to this domain, as it poses a significant risk of brand impersonation and potential financial loss to unsuspecting users. The domain is still active as of the report date, July 24, 2026, and is listed as a high-risk threat. Given the high risk level and the active status of the domain, immediate action is recommended to mitigate exposure to this threat.