bitgetwbs[.]cexgfvi[.]cn

This domain is flagged as a credential-theft phishing site designed to impersonate the Bitget cryptocurrency exchange. The site presents a fraudulent login page titled 'Login - Bitget,' aiming to harvest user credentials, including usernames, passwords, and potentially two-factor authentication codes. Such stolen credentials are typically used for unauthorized account access, fund theft, or further social engineering attacks against victims or their contacts. Analysis indicates the domain was registered on October 22, 2025, through 邦宁数字技术股份有限公司, a registrar frequently associated with malicious infrastructure. The site is detected by 8 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100, confirming its malicious nature. Infrastructure analysis reveals the use of Vue.js, Nginx, jQuery, HSTS, and HTTP/3, suggesting a technically sophisticated operation. The domain resolves to the IP address 180.97.215.93 and is currently blocked by at least one security service, PhishDestroy. If you visited bitgetwbs.cexgfvi.cn or entered credentials on a similar-looking site, take immediate action. First, revoke access to any active sessions on the legitimate Bitget platform and change your password using a secure device. Enable multi-factor authentication if not already active. Monitor your account for unauthorized transactions or suspicious activity, and report any anomalies to Bitget support. Additionally, scan your device for malware, as phishing sites may deploy additional payloads. Avoid reusing passwords across platforms, and consider using a password manager to generate and store unique credentials.