suport-bluue-walet[.]pages[.]dev

The domain suport-bluue-walet.pages.dev is currently active and has been classified as a brand‑impersonation site targeting the Bitcoin brand. Infrastructure analysis shows the domain was registered on May 01 2026 and is hosted behind Cloudflare’s network (188.114.97.3, CA). It utilizes Cloudflare‑provided services, including HSTS and HTTP/3, and presents a valid Google Trust Services SSL certificate (WE1). Nameservers are marjory.ns.cloudflare.com and nicolas.ns.cloudflare.com, confirming the Cloudflare registration. The site returns HTTP 200 and displays the page title “Bitcoin Desktop Wallets 2025 | Secure BTC,” indicating an attempt to lure users seeking cryptocurrency wallet software. Reputation data is poor: Gridinsoft assigns a trust score of 0/100, and PhishDestroy has already blocked the domain. VirusTotal reports a single vendor detection out of 91, and the domain appears on one external blocklist. While the page content has not been examined, the combination of recent registration, brand‑specific title, and low reputation scores strongly suggests a malicious impersonation campaign. Defenders should add the domain to deny‑list policies, monitor traffic for connections to the associated Cloudflare IP, and consider broader Bitcoin‑related threat‑intel feeds for related indicators.