bitget-fsuper-dry[.]altcarb[.]eu

The domain bitget-fsuper-dry.altcarb.eu was observed on July 12, 2026 delivering a web front‑end that mimics the official Bitget platform. The page title returned by the server is “FreqUI”, and the content is crafted to suggest a legitimate cryptocurrency exchange, constituting a high‑risk brand‑impersonation campaign. Technical fingerprinting shows the site is built with Python back‑end served by Uvicorn, while the client side runs Vue.js over HTTP/3. The server presents a valid Let's Encrypt certificate (E7) and returns HTTP 200 for all requests. DNS resolution points to 152.53.145.232, an address owned by netcup GmbH in Germany and announced by AS197540. The domain is registered through OVH SAS and uses the OVH name servers dns11.ovh.net and ns11.ovh.net. Threat intelligence feeds list the host on a single security blocklist, and PhishDestroy has already added it to its block list. VirusTotal analysis flagged the domain by one of ninety‑five scanners, and Gridinsoft assigns a trust score of zero out of one hundred, indicating a strong malicious reputation. No additional public reports were found, leaving the full scope of the operation unknown. Defenders should treat the address as malicious and block network traffic to 152.53.145.232 and to the domain name itself. Email filters and web gateways should be updated to reject any URLs containing bitget-fsuper-dry.altcarb.eu. Users of the Bitget brand should be warned that any request for credentials or cryptocurrency transfers originating from this domain is likely fraudulent, and they should verify URLs against the official Bitget infrastructure before providing sensitive information.