bitcoin-defi-bible[.]pages[.]dev

This domain, bitcoin-defi-bible.pages.dev, is under investigation for high-risk brand impersonation targeting Bitcoin. Registered on March 31, 2026, through Cloudflare, Inc., the domain resolves to IP address 188.114.96.3 and is currently active. Infrastructure analysis reveals the use of Cloudflare hosting, HTTP/3, and HSTS, alongside an SSL certificate issued by Google Trust Services. The page title, 'The Bitcoin DeFi Bible | SlowFi Season on Bitcoin,' explicitly references Bitcoin, aligning with the reported brand impersonation threat type. Detection data indicates the domain appears on one security blocklist, and one of 95 security vendors on VirusTotal has flagged it as malicious. The domain remains unblocked by most major security providers, though it is currently blocked by PhishDestroy. Gridinsoft assigns a trust score of 0/100, further supporting its classification as high-risk. While the domain's content has not been fully analyzed, the combination of Bitcoin branding, recent registration, and low detection but high-risk indicators suggests a targeted phishing campaign. Defenders should prioritize monitoring and blocking this domain, particularly in environments where Bitcoin-related communications are common. Additional scrutiny of associated infrastructure, such as the resolving IP and registrar, may reveal broader campaign linkages. No evidence of widespread detection or takedown efforts exists as of this report.