bitget316[.]com

On July 23, 2026, the domain bitget316.com was observed to be offline but retains multiple indicators of malicious activity targeting the cryptocurrency exchange brand Bitget. The domain was registered on December 26, 2024 through MAFF Inc. and uses the nameservers ns1.maff.com and ns2.maff.com, which are typical of the registrar’s default configuration. DNS resolution points to IP address 134.122.183.155, which is geolocated in Hong Kong and belongs to AS152194, CTG Server Limited. No TLS certificate is presented for the host, meaning the site would have been served over plain HTTP if accessed. Reputation services assign the lowest possible trust scores: Scamadviser rates the site 1/100 and Gridinsoft also rates it 1/100, indicating a near‑certain malicious intent.

The page title returned by the HTTP response is “Home page,” a generic title that does not provide branding cues beyond the supplied impersonation label. The site is classified as a “Crypto Scam” and is listed on a single security blocklist, specifically PhishDestroy, which has already blocked the domain. VirusTotal analysis shows that 11 of 95 scanned security vendors flagged the domain as malicious, reinforcing the suspicion of fraudulent activity. The evidence points to a brand‑impersonation campaign that likely aims to lure victims into disclosing cryptocurrency credentials or sending funds to fraudulent accounts.

The exact phishing or credential‑harvesting page content has not been captured, so the precise attack vector remains uncertain. Defenders should continue to block the domain at network perimeter devices, update DNS sinkhole lists with the associated IP address, and monitor for any related payloads that reference the same registrar or hosting ASN. Additional threat‑intel feeds should be queried for any emerging indicators tied to the MAFF Inc. registrar or the CTG Server Limited network.