web3-bitget[.]net[.]in

Analysis as of July 22 2026 shows that the domain web3-bitget.net.in was registered on February 21 2026 through Dynadot LLC and is currently taken offline. The site title returned the literal string “web3-bitget.net.in/”, which aligns with the observed impersonation of the cryptocurrency exchange Bitget. The domain resolves to IP 149.30.242.118, an address located in Hong Kong and assigned to AS133199 SonderCloud Limited. No SSL certificate is present, and the HTTP service returns no secure connection. Reputation services flag the domain as highly malicious: Gridinsoft assigns a trust score of 0 out of 100, and one security blocklist has listed the domain.

VirusTotal scans report three positive detections out of ninety‑three scanners. PhishDestroy has also blocked the domain. The nameservers listed are dave.ns.cloudflare.com and itzel.ns.cloudflare.com, indicating use of Cloudflare DNS. The reported scam type is wallet or seed phishing, suggesting attempts to harvest private keys or recovery phrases from Bitget users.

Because the site is offline, dynamic content cannot be inspected, and no further page artifacts have been captured. Defenders should continue to block the resolved IP and associated ASN, monitor any re‑registration of the domain or its sub‑domains, and add the domain to internal deny lists. Additional surveillance of related Cloudflare nameserver entries is advised, as they may be reused for future malicious deployments. The limited detection footprint warrants elevated risk consideration until the host infrastructure is fully remediated.