appbitgetweb[.]cam

Analysis of the domain appbitgetweb.cam confirms it as a high-risk crypto phishing site targeting Bitget users. The domain was registered on January 6, 2026, through Dynadot LLC and resolves to the IP address 206.119.167.86, hosted under AS133199 (SonderCloud Limited) in Hong Kong. The SSL certificate is classified as R13, and the site's page title explicitly mimics Bitget's official branding: 'Download Bitget Wallet | iOS, Android and Google Chrome | Bitget Wallet.' This aligns with the reported scam type of a crypto scam, likely designed to distribute fraudulent wallet applications or harvest credentials. The domain appears on four security blocklists and is actively blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura.

Gridinsoft assigns it a trust score of 0/100, indicating no legitimate reputation. AlienVault OTX includes the domain in one threat intelligence pulse, further corroborating its malicious classification. While VirusTotal reports 14 detections out of 95 security vendors, this does not imply benign status, as the remaining vendors may not have updated signatures or may classify the domain differently. Infrastructure analysis reveals the domain was taken offline by the time of this report, though historical resolution and detection data remain relevant for retrospective threat hunting.

Defenders should treat this domain as confirmed malicious, particularly in environments involving cryptocurrency transactions or Bitget-related activity. No evidence suggests the site used a known phishing kit, and the exact content beyond the page title remains unanalyzed. Indicators such as the IP, ASN, and registrar should be incorporated into network defenses to prevent future access or similar threats from the same infrastructure.