cn-bitget[.]com

Analysis of cn-bitget.com indicates this domain is a brand-impersonation scam targeting Bitget, a cryptocurrency exchange. The domain was registered on February 21, 2026, and was observed resolving to the IP address 154.210.62.151, hosted in Hong Kong under AS9294 (GNET INC.). Infrastructure checks reveal the domain was flagged by one security vendor on VirusTotal, though the specific detection context remains limited. It appears on a single security blocklist, specifically PhishDestroy, which classified it as a crypto scam.

The page title, 'Bitget官网·(中国)Bitget(交易所)', explicitly references Bitget and positions the site as an official Chinese trading platform, reinforcing the likelihood of brand impersonation. The SSL certificate, identified as E6, provides no additional trust indicators, as it is not issued by a widely recognized certificate authority. At the time of this report, the domain is offline, suggesting either takedown action or voluntary deactivation by the threat actor. Defenders should treat cn-bitget.com as a confirmed malicious domain associated with cryptocurrency fraud.

While the exact mechanics of the scam—such as whether it involved credential harvesting, fake deposits, or wallet-draining scripts—are not yet analyzed due to the site's offline status, the combination of brand impersonation, hosting in a high-risk jurisdiction, and blocklist inclusion justifies elevated caution. Organizations should update blocklists to prevent access, monitor for residual DNS queries, and alert users who may have interacted with the domain prior to its takedown. No additional evidence links this infrastructure to broader threat campaigns or actor groups at this time.