Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
bitcoinhyper-live.xyz shows high-risk / scam indicators.
| What this site appears to be | A Bitcoin Layer 2 token presale that sells $HYPER with a 35% staking reward headline, a countdown and sold-out urgency, a live-looking purchase feed, and unverified audit, legal, and listing claims. Visitors are directed to connect a wallet or pay by card, and the page provides no verifiable company identity, audit reports, or contact details. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 22 days oldMost scam domains are under a year old | Risk |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
Bitcoin Hyper is a single-page cryptocurrency token presale site that presents itself as the "official website" of a Bitcoin Layer 2 project and sells a token called $HYPER. It shows a countdown, a feed of recent purchases and a tokenomics and bridge narrative, and it is available in about two dozen languages. Its apparent business model is collecting buyer payments, in crypto or by card, in exchange for a token whose underlying Layer 2 product is described but not shown to be live.
Scam/Impersonation Risk
No formal contradictions were observed: no confirmed threat-feed listing, no conflicting legal identities, and no detected impersonation of a known brand. The risk comes from the homepage's commercial mechanics, which match a recognised high-pressure presale pattern. The headline promise is a 35% staking reward through a "Buy and Stake" option, a yield with no stated source of return. A countdown and "sold-out" urgency messaging contradict the raise figures shown on the same page. A scrolling "latest purchases" feed lists truncated wallet addresses with tiny, repeating buys (from roughly $1.51 to about $150), and nothing ties it to real on-chain activity. The page also asserts audit, legal and exchange-listing credentials without linking any audit report, legal opinion or listing confirmation. Payment is demanded up front, via wallet connection or card, before any working product exists. The proceeds are split across treasury, marketing, listings and development allocations, and the page gives no way to trace how funds are controlled. The domain name pairs the project brand with a "-live" suffix on a low-cost generic TLD while calling itself "official". This is a common pattern for pages that borrow an existing project's name, though the evidence does not confirm that here. Overall, the deposit-before-service structure, unevidenced yield and manufactured scarcity make this a significant exposure for anyone sending funds. Evidence:
- Homepage: a 35% staking reward headline, a countdown timer and sold-out urgency, with raise figures that conflict with the scarcity claim.
- Homepage: the purchase feed shows only truncated wallet addresses and small repeating amounts, with no verifiable source.
- Homepage: audit, legal and listing claims are made with no supporting document or link.
- Domain registration: created 2026-09-30 (about 21 days old, 0.06 years), through the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED, expiring 2027-09-30.
Regulatory Verification Notes
The homepage names no operating company, registered address, jurisdiction, licence or registration number, and it publishes no verifiable contact channel. This is a disclosure gap for a site soliciting funds for a token with staking returns. The legal-status statements it does make cannot be corroborated from the page. No third-party regulatory or broker-reputation record was matched, so no external reputational signal exists in either direction. The transport-layer posture is routine: a valid domain-validated certificate that carries no organisational identity assurance, so it says nothing about who operates the site. Without an independently confirmed operator, the site's identity cannot be treated as established. Evidence:
- Homepage: no company name, address, jurisdiction, licence or registration number is disclosed.
- Homepage: no contact channel is published, though the site invites payment.
- Transport encryption: TLS certificate issued by YE2 (DV), valid to 2026-12-29.
- Hosting: served from AS13335 (Cloudflare, Inc., US); no DeFi directory recognised the project.
What to Verify Next
Any claim of an audit should be checked against the auditor's own published reports, reached independently rather than through links on this site. Listing claims should be confirmed on the named exchanges or on-chain explorers. The project's genuine official domain, if one exists, should be established through its independent channels, such as the known team, an established exchange or major data aggregators, and compared with this domain. The legal entity behind the presale should be searched in the company or securities registries of the relevant jurisdictions. The staking mechanism and token contract should be reviewed on-chain, including who controls minting, treasury wallets and withdrawals. The official support and contact channels should be confirmed through an independent route. Evidence:
- Homepage: audit and listing badges carry no resolvable evidence.
- Homepage: the token is shown as available for purchase while the Layer 2 product is only described, not demonstrated.
- Homepage: tokens named include $HYPER alongside BTC, SOL, ETH and BNB, which indicates multi-chain payment and bridging that needs on-chain confirmation.
Summary Verdict
The available evidence supports an elevated-risk assessment. The site's commercial design and the absence of verifiable accountability outweigh its technically orderly delivery. It is a newly created, unverified token sale whose claims remain unsubstantiated, and nothing observed offsets that conclusion.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF, and every resolved address is an edge address, so the origin host is not visible. The delivery is stable and the certificate is valid, which are mitigating hygiene factors. This infrastructure is mainstream and available to any registrant, so it supports availability and DDoS resilience but not legitimacy. Edge-only visibility also means the underlying content or hosting can change quickly without any visible change in addressing.
Closing Assessment
Prospective buyers should treat the site as unverified and should not commit funds, connect a wallet or enter card details until the operator, the audit and the token contract have been confirmed through independent sources. Any engagement should be limited to reading the material and tested only with amounts that can be lost entirely.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by page content, hosting and network, several checks together.
01 Page content
- The review of the page content rated it high risk.Page content
rule:PAGE_RISK_HIGH - The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
03 Several checks together
- No external feed lists the site, but its own page content reads as risky.Several checks together
rule:HYB_POSITIVE_EXTERNAL_NEGATIVE_PAGE
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of bitcoinhyper-live.xyz.
- The request stayed on bitcoinhyper-live.xyz. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-30. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3031::ac43:caa0 |
| Name servers | LADY.NS.CLOUDFLARE.COM, ROB.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-29 |
| Domain age | 0.06 years (continuous registration) |
| Domain expiry | 2027-09-30 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about bitcoinhyper-live.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.