en-bitcoinhyper[.]org

Analysis of en-bitcoinhyper.org shows a domain that was created on August 20, 2025 and is currently offline. The domain resolves to IP address 104.21.64.1, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No SSL certificate is presented for the host, indicating that HTTPS connections are not available. The page title returned during the brief resolution was "Bitcoin Hyper: Presale Token & Project Overview," which aligns with the listed scam type of a crypto scam and suggests an attempt to lure victims with a presale token offering.

The domain is flagged by one of ninety‑five VirusTotal scanners, and trust scores from external services are low: Scamadviser assigns a 41 / 100 rating while Gridinsoft reports a 0 / 100 score. The registrar is listed as Web Commerce Communications Limited and the authoritative nameservers are crystal.ns.cloudflare.com and lynn.ns.cloudflare.com, both Cloudflare‑managed. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy. The threat classification is brand impersonation, targeting the brand "across" as indicated in the intelligence.

Concrete evidence therefore includes the IP ownership, lack of TLS, low trust metrics, the single vendor flag, and the presence on a blocklist. What remains uncertain is the full content of the site, any additional payloads, and whether the domain will be re‑hosted after the current offline status. Defenders should add en-bitcoinhyper.org to URL filtering and DNS block lists, monitor the associated IP range for new registrations, and consider sinkholing traffic to the Cloudflare IP if feasible. Continuous observation of the registrar and nameserver configuration is advised, as future variants may reuse the same infrastructure.