bitgetexchange[.]app

The domain bitgetexchange.app was observed hosting a counterfeit BitGet exchange front‑end. The site advertised itself with the page title “BitGet Exchange App – Trade Crypto Fast & Secure –”, which directly mirrors the legitimate brand’s naming conventions. Registration details show the domain was created through NameCheap, Inc., but no nameserver information is available and the site did not present an SSL certificate, indicating an unsecured HTTP service. Network resolution points to the IP address 92.113.23.70, which belongs to AS47583 hosted by Hostinger International Limited in Germany. The hosting provider is commonly abused for short‑lived malicious infrastructure.

Threat intelligence feeds have listed the domain on a single security blocklist and it is actively blocked by PhishDestroy. VirusTotal analysis returned ten positive detections out of ninety‑five scanners, confirming that multiple anti‑malware engines consider the domain malicious. The Gridinsoft trust score of zero further reflects a lack of confidence in the domain’s safety. The current operational status is offline, which may indicate that the actors have taken the site down or are rotating infrastructure.

Because the domain mimics a cryptocurrency exchange, it is likely intended for credential harvesting or financial fraud, although no specific payload or phishing page has been publicly documented. Defenders should continue to block the domain at perimeter filters, monitor the associated IP range for any re‑use, and add the host to threat‑intelligence feeds. Additional investigation of HTTP responses, any archived content, and potential phishing kits would be required to fully characterize the campaign. Until such evidence is gathered, the domain should be treated as a high‑risk indicator of compromise.