bitgetai[.]xyz

The domain bitgetai.xyz is a confirmed phishing site engaged in brand impersonation targeting Bitget, a cryptocurrency exchange. It was designed to deceive users into believing they were interacting with the legitimate Bitget platform, likely to harvest login credentials or sensitive information related to cryptocurrency transactions. As of the latest verification, bitgetai.xyz has been taken offline, but it previously posed an elevated risk due to its fraudulent activity.

Technical analysis shows that bitgetai.xyz was flagged by 2 of 95 security vendors on VirusTotal, including Forcepoint ThreatSeeker and SOCRadar. The domain was registered through NameCheap, Inc. on February 21, 2026, and resolved to the IP address 185.18.222.225, located in Japan under AS396356 Latitude.sh. It appeared on one security blocklist, PhishDestroy, and used an SSL certificate issued by Let's Encrypt (R13). The observed page title was 'Redirecting...', and the site employed technologies such as Nginx and OpenResty. Gridinsoft assigned it a trust score of 0/100, further indicating its malicious nature.

Users who may have interacted with bitgetai.xyz should immediately change their Bitget account passwords and enable two-factor authentication (2FA) if they have not already done so. Monitor account activity for unauthorized transactions or login attempts, and report any suspicious behavior to Bitget's official support channels. Additionally, victims can report the phishing domain to their local cybercrime authorities or platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to help prevent further abuse.