bitcoinhyper[.]network

The domain bitcoinhyper.network was registered on 2026-02-21 through NiceNIC International Group Co., Limited and resolves to 172.67.175.86, an address announced by AS13335. The site presents the page title “Bitcoin Hyper BTC Layer 2 | Best Crypto Presale To Buy Now” and carries an SSL certificate issued by Google Trust Services under the WE1 label, indicating use of a public‑trusted CA. Technical analysis shows HSTS enforcement, HTTP/3 support, and authoritative nameservers ernest.ns.cloudflare.com and clara.ns.cloudflare.com. The HTTP response currently returns 403, and the Gridinsoft trust score is 0 out of 100, reflecting an extremely low credibility rating. VirusTotal scans have flagged the domain by six of ninety‑three vendors, and the domain appears on three independent blocklists, including PhishDestroy, MetaMask, and SEAL. The campaign is classified as brand impersonation targeting the Ethereum brand, despite the page title referencing Bitcoin, and the risk level is marked high with an active status. While the underlying content has not been examined directly, the convergence of a recent registration, low trust score, limited vendor detections, and inclusion on multiple blocklists suggests a malicious intent. Defenders should block or monitor traffic to 172.67.175.86 and the domain itself, enforce strict outbound filtering for connections to this host, and incorporate the listed blocklist entries into their detection rules. Ongoing observation is recommended to capture any changes in HTTP status or additional vendor detections.