bittget-logn-io[.]pages[.]dev

This domain, bittget-logn-io.pages.dev, is flagged as a high-risk brand impersonation threat targeting Bitget, a cryptocurrency trading platform. Analysis indicates the site mimics the official Bitget login interface, presenting itself as 'Bitget Login – Secure Crypto Trading Platform Access.' The infrastructure and design suggest an intent to harvest user credentials, potentially facilitating unauthorized access to cryptocurrency accounts. No direct evidence of a crypto drainer kit was observed, but the site’s structure aligns with credential phishing tactics commonly used in financial fraud schemes. Infrastructure analysis reveals the domain was registered through Cloudflare Pages and resolves to the IP address 188.114.96.3, associated with Cloudflare, Inc. in Canada. The domain was created on May 06, 2026, an anomalous future date that may indicate an attempt to evade detection or obscure registration details. VirusTotal reports 1 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider, which does not mitigate the fraudulent nature of the site. As of the latest assessment, bittget-logn-io.pages.dev remains active, posing a continued risk to users who may mistake it for the legitimate Bitget platform. Immediate response actions include reporting the domain to additional security blocklists and notifying the hosting provider to request takedown. Users are advised to verify domain authenticity by cross-referencing official communications from Bitget and avoiding interaction with this domain. The remaining risk is classified as high due to the active status, low detection rate, and potential for credential theft leading to financial loss.