bitfiyer-4273-9ae77[.]bitfiyer-smzk[.]com

The domain bitfiyer-4273-9ae77.bitfiyer-smzk.com was registered through GoDaddy.com, LLC on 26 September 2025. Its authoritative nameservers are ns69.domaincontrol.com and ns70.domaincontrol.com, both typical of GoDaddy‑hosted zones. The site is currently offline, and the HTTP service returns no content, but historical analysis shows the page title was “BitGet”, matching the brand target BitGet and confirming a brand‑impersonation intent. The SSL certificate, issued by Let’s Encrypt under the R12 profile, was valid at the time of capture, indicating the operator attempted to present a trusted HTTPS connection.

Network resolution points to IP 162.245.220.172, which belongs to AS150452 LANDUPS LIMITED in Hong Kong; this IP appears on two public blocklists and is flagged by the PhishDestroy and ScamSniffer blocklists. VirusTotal scans recorded four positive detections out of ninety‑three security vendors, reinforcing the malicious classification. Gridinsoft assigned a trust score of 0 out of 100, reflecting a high confidence of malicious behavior.

The domain is categorized as a crypto‑scam, explicitly impersonating BitGet, and the limited detection footprint suggests a short‑lived campaign. Defenders should block the domain and its associated IP at perimeter firewalls, update URL filtering feeds with the two blocklist identifiers, and monitor for any DNS queries to the listed nameservers. Because the site is offline, threat hunting should focus on any residual payloads or credential harvests that may have been delivered during the active window, and incident response teams should advise users to disregard any communications referencing BitGet that originated from this domain.