bitget-token[.]site

bitget-token.site was registered with NameSilo, LLC on 13 September 2025 and is currently reported as offline. The domain resolves to the IPv4 address 43.212.99.130, which is announced by AS16509 belonging to Amazon.com, Inc. and geolocated to Taiwan. The hosting provider is therefore a cloud service operated by Amazon Web Services. No TLS certificate is presented for the host, indicating the site was served over plain HTTP. The page title returned by the site, “BITGET‑TOKEN”, aligns with the declared brand impersonation of Bitget, and the intelligence tags the activity as a crypto‑scam.

Google Safe Browsing classifies the URL as a social‑engineering threat, and PhishDestroy has listed the domain on its blocklist. VirusTotal scans show that 10 of 95 scanned security vendors flagged the domain as malicious. Additional reputation data includes a Gridinsoft trust score of 0 out of 100 and a single entry on a security blocklist. AlienVault OTX reports the domain in one threat‑intelligence pulse.

The domain is serviced by the Cloudflare name servers dylan.ns.cloudflare.com and zoe.ns.cloudflare.com. Given the combination of registrar information, cloud hosting, lack of encryption, multiple vendor detections, safe‑browsing warning, and low trust score, the evidence strongly supports a high‑risk classification. Defenders should continue to block the domain and its associated IP address at perimeter filters, add the observed name servers to monitoring lists, and ensure that any traffic to bitget-token.site is denied or logged for further investigation. Ongoing threat‑intel feeds should be consulted for any reappearance, and incident response teams should be alerted if users report unsolicited communications referencing the domain.