bitget[.]i-nn[.]xyz

The domain bitget.i-nn.xyz is a confirmed phishing site engaged in brand impersonation targeting cryptocurrency users. It poses as the legitimate service 'across' to deceive victims into interacting with fraudulent wallet or transaction pages, potentially leading to unauthorized fund transfers or credential theft. No drainer kit was identified, but the site operated as a cryptocurrency scam. As of the latest verification, bitget.i-nn.xyz has been taken offline.

Technical indicators confirm the malicious nature of bitget.i-nn.xyz. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Forcepoint ThreatSeeker and Fortinet, and appears on 1 security blocklist (PhishDestroy). Registered through NameCheap, Inc. on March 24, 2025, it resolved to the IP address 198.54.115.219, hosted by Namecheap, Inc. in the US. No SSL certificate was present, and the observed page title was 'Bitget Wallet - Best Crypto Wallet for Web3, DeFi, Safe & Fast'. The domain used nameservers dns1.namecheaphosting.com and dns2.namecheaphosting.com, and the HTTP status returned was 429.

Victims of bitget.i-nn.xyz should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Monitor accounts for unauthorized transactions and report the incident to the impersonated brand's official support channels. Additionally, submit the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to prevent further abuse.