Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
bitgetghf[.]cexgfvi[.]cn
“Login - Bitget”
Zusammenfassung der Beweislage
The domain bitgetghf.cexgfvi.cn was created on 22 October 2025 and is registered through the Chinese entity 邦宁数字技术股份有限公司. It resolves to the IP address 180.97.215.93, which belongs to AS4134 CHINANET-BACKBONE and is geolocated in China. The authoritative nameservers are ns1.judns.com and ns2.judns.com. No SSL certificate was observed when the site was reachable, indicating that the service operated over plain HTTP.
HTTP headers disclosed the use of HSTS and HTTP/3, while server‑side technologies identified include Nginx, Vue.js, jQuery, and a typical web‑application stack. The page title returned by the server was "Login - Bitget", confirming an attempt to impersonate the Bitget cryptocurrency exchange. VirusTotal analysis recorded detections from 7 of 94 security vendors, and the domain appears on at least one external blocklist. PhishDestroy has listed the domain as blocked, and the Gridinsoft trust score is 0 out of 100, reflecting a high confidence of malicious intent.
The site is currently taken offline, limiting real‑time observation, but the infrastructure details remain valuable for threat‑intel correlation. Defenders should continue to block the domain and its associated IP, monitor for any re‑registration or reuse of the same nameservers, and update detection signatures to include the observed page title and technology fingerprint. Organizations using Bitget services should educate users about the lack of HTTPS and the specific login page title to reduce credential‑phishing risk.
Momentaufnahme der übermittelten Beweise
- Gesendet
- Protokolleinträge
- 1
- Fall-ID
PD-20260317-6BBA1C- Titel der erfassten Seite
- Login - Bitget
- PDF-Artefakt
- PDF-Beweis
Rechtsgrundlage
Vollständiger Beweistext
Acceptable Use Policy (AUP): The domain bitgetghf.cexgfvi.cn is engaged in phishing activities, which is a direct violation of your AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The continued operation of this domain constitutes a breach of your TOS, which reserves the right to suspend or terminate services for any activities that violate applicable laws and regulations.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA) - 18 U.S.C. § 1030: This law prohibits unauthorized access to computers and networks, which encompasses phishing schemes.
Wire Fraud - 18 U.S.C. § 1343: Engaging in schemes to defraud individuals through electronic communications is a violation of this statute, applicable to phishing activities.
CAN-SPAM Act - 15 U.S.C. § 7701: This act regulates commercial email and prohibits deceptive practices, including phishing.
Regulatory Note: Failure to take immediate action against this domain may result in liability for facilitating illegal activities, potentially exposing your organization to regulatory scrutiny and enforcement actions.
Data Coverage
Erkenntnisse zur Netzwerksicherheit
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | bitgetghf.cexgfvi.cn |
malicious | Sinkholed |
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Blocklistenabdeckung
10 überwachte externe Feeds · gespeicherter Stand 13.08.2026
Forensische Erkenntnisse
VirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of bitgetghf.cexgfvi.cn · checked Mar 17, 2026
Wurden Sie von dieser Website betroffen?
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Jede beliebige Domain prüfen
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenPhishing melden
Melden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenEchtzeit-Bedrohungsfeed
Aktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBleiben Sie auf dem Laufenden, bleiben Sie sicher
Beobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt