bitget-wjl[.]hl[.]cn

This domain is flagged for elevated-risk brand impersonation targeting Bitget, a cryptocurrency exchange platform. Analysis indicates the site mimics legitimate Bitget branding to harvest user credentials and financial data, specifically through fake promotional offers such as new-user rewards. The page title, "Bitget数字资产平台 - 开户享新人奖励 | 量化智能交易工具 2026," directly references Bitget’s services, including digital asset trading and automated trading tools, to deceive victims into disclosing sensitive information. Infrastructure analysis reveals the domain was registered on March 04, 2026, through Web Commerce Communications Limited. It resolves to IP address 107.151.64.69, hosted in Hong Kong under AS132839 (POWER LINE DATACENTER). The domain is detected by 9 out of 95 security vendors on VirusTotal and appears on one security blocklist. It was proactively blocked by at least one threat intelligence feed prior to being taken offline. The combination of brand impersonation, low detection thresholds, and hosting in a high-risk autonomous system underscores its malicious intent. Mitigation steps for organizations and users include blocking the domain and its associated IP (107.151.64.69) at the network perimeter. Security teams should monitor for similar domains registered through Web Commerce Communications Limited or resolving to the same hosting provider. End-users should be educated to verify domain authenticity before entering credentials, particularly for financial or cryptocurrency platforms. If credentials were entered on this site, immediate password resets and multi-factor authentication enablement are recommended for affected accounts.