bitget[.]tax
Análisis de phishing y seguridad de bitget.tax
“在Bitget注册以获得最高6,200 USDT的奖金 | Bitget”
bitget.tax — error del servidor (HTTP 502). Suplantación de marca: Bitget; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 4/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft); PhishDestroy score 65/100. Registrador: Alibaba Cloud Computing.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of the domain bitget.tax indicates it was actively impersonating the cryptocurrency exchange Bitget as of July 23, 2026. The domain resolved to IP address 8.223.30.170, hosted on Alibaba's infrastructure (AS45102, Hong Kong). Registration was conducted through Alibaba Cloud Computing Ltd. (HiChina), with nameservers dns31.hichina.com and dns32.hichina.com. The SSL certificate was issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites.
The page title, extracted from HTTP headers, read '在Bitget注册以获得最高6,200 USDT的奖金 | Bitget', directly referencing a 6,200 USDT bonus offer in an apparent attempt to lure users into a crypto scam. This aligns with the scam type classification provided by Gridinsoft, which assigned a trust score of 0/100. The domain appeared on one security blocklist (PhishDestroy) and was flagged by 1 of 95 security vendors on VirusTotal, though the specific detection context remains limited. Infrastructure analysis reveals the domain was taken offline by the time of this report, though residual DNS or cached entries may persist.
Defenders are advised to block the domain and its resolved IP at network perimeter controls. Monitoring for similar domains using the same registrar, nameservers, or hosting provider may help identify related threats. The exact content of the site beyond the page title is not yet analyzed, and no additional phishing kit or malware indicators were provided in available intelligence.
Señales de seguridad
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Evidencias archivadas
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.