bitgetai[.]biz

The domain bitgetai.biz was registered on February 21, 2026 through NameCheap, Inc. and is presently taken offline. Infrastructure analysis shows the host resolves to IP address 172.237.149.231, which is registered to the Akamai Connected Cloud network (AS63949) and geolocated in the United States. The web server reports Nginx and OpenResty as the underlying technologies, and the TLS certificate is issued by Let’s Encrypt under the R13 root, indicating a publicly‑issued certificate without extended validation. Nameserver records point to dns101.registrar-servers.com and dns102.registrar-servers.com, both standard registrar‑provided resolvers.

Security telemetry confirms the domain appears on a single blocklist and has been flagged by PhishDestroy. VirusTotal analysis returned six positive detections out of 93 scanning engines, reinforcing the malicious classification. Gridinsoft assigned a trust score of zero out of one hundred, and AlienVault OTX references the domain in one threat‑intel pulse. The page title observed during the brief scan was “Category Search,” but no additional content analysis is available.

The site explicitly impersonates the cryptocurrency exchange brand Bitget, aligning with the indicated crypto‑scam classification. Defenders should update inbound and outbound filtering to block resolution of the IP 172.237.149.231 and the domain itself, add the two registrar‑provided nameservers to watchlists, and monitor any TLS fingerprints associated with the Let’s Encrypt R13 issuance. Given the low trust score, multiple vendor detections, and confirmed blocklist presence, the domain should be treated as a high‑confidence malicious indicator. Continuous observation of any re‑appearance on blocklists or new detections is advised, as the current offline status does not preclude future re‑use of the same infrastructure.