btchypers2support[.]pages[.]dev

The domain btchypers2support.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and is served from the Cloudflare network (ASN 13335) with the IP address 188.114.96.3 located in the United States. The authoritative nameservers are thea.ns.cloudflare.com and ignat.ns.cloudflare.com, indicating the domain is fully managed by Cloudflare’s DNS service. A page title returned by the server reads "Suspected phishing site | Cloudflare" and the HTTP response code is 403, suggesting the site is currently inaccessible or intentionally blocked. VirusTotal has recorded 11 detections out of 93 scanning engines, and the domain appears on two external blocklists, specifically PhishDestroy and ScamSniffer.

Additional reputation services show a Gridinsoft trust score of 0 / 100 and a Scamadviser trust score of 41 / 100, reinforcing the malicious assessment. The SSL certificate presented is issued by Google Trust Services under the identifier WE1, confirming that TLS is correctly configured despite the malicious intent. Technology fingerprints include HTTP/3, HSTS, and Cloudflare’s edge services.

The listed scam type is a crypto scam, though no further details about payload or victim interaction are available. Defenders should immediately block the domain and its associated IP address in perimeter defenses, add the host to internal blacklists, and monitor for newly registered domains that share the same naming pattern or use the same Cloudflare nameservers. Ongoing threat‑intel sharing with industry partners is recommended to capture any emergent activity tied to this infrastructure.