bitgetg[.]co[.]kr

Analysis of the domain bitgetg.co.kr indicates active brand impersonation targeting Binance, as documented on July 12, 2026. The domain was registered on May 25, 2022, through Gabia, Inc., and currently resolves to the IP address 18.154.227.4. Infrastructure assessment shows a Gridinsoft trust score of 0/100 and a Scamadviser trust score of 26/100, both consistent with high-risk phishing activity. The domain appears on two security blocklists (PhishDestroy and BLP-Malware) and is referenced in 23 AlienVault OTX threat intelligence pulses, suggesting persistent malicious use. The page title '비트겟' and the declared brand target (Binance) confirm the intent to deceive users into believing the site is affiliated with the cryptocurrency exchange. The SSL certificate is issued by GlobalSign nv-sa, which does not mitigate the domain's fraudulent purpose. While four of 95 security vendors on VirusTotal flag the domain, this detection rate alone does not fully capture its risk profile. Defenders should treat bitgetg.co.kr as an active threat. Blocking the domain and its resolving IP at network and endpoint levels is recommended. Further analysis of associated infrastructure (e.g., hosting provider, nameserver patterns) may reveal additional linked phishing domains. The domain's longevity (over four years) and continued activity despite blocklist inclusion suggest it remains effective for attackers, warranting ongoing monitoring.