bitgetx[.]fun

PhishDestroy has identified bitgetx.fun as a fraudulent domain engaged in brand impersonation of the cryptocurrency exchange Bitget. This malicious site was designed to deceive users into believing they were accessing a legitimate Bitget platform, specifically targeting Web3 wallet credentials as indicated by the page title 'Web3 Wallet Login'. The threat level is elevated, and the domain was flagged for operating a phishing scheme aimed at stealing sensitive login information from unsuspecting victims.

Technical analysis reveals several concerning indicators. The domain received a VirusTotal score of 1 out of 95 security vendors flagging it as malicious, and it appears on at least 1 security blocklist. It was registered through Dynadot LLC on February 21, 2026, and its SSL certificate was issued by Let's Encrypt (E7), which is commonly abused by phishing sites. The domain resolved to IP address 185.18.222.225 and was not listed on Google Safe Browsing at the time of analysis. These technical details underscore the deceptive nature of the site, which leveraged a legitimate-looking certificate to appear trustworthy.

As of the latest check, bitgetx.fun has been taken offline, likely due to takedown actions by security researchers or hosting providers. However, the risk remains that the operators may launch similar domains under different names. Users who may have interacted with this site or entered credentials should immediately change their passwords and enable two-factor authentication on their Bitget accounts. PhishDestroy recommends staying vigilant against unsolicited login prompts and always verifying URLs before entering sensitive information.