us-bitget-login-x[.]pages[.]dev

This domain, us-bitget-login-x.pages.dev, is confirmed as an active phishing site specializing in brand impersonation targeting Bitget, a cryptocurrency exchange platform. Analysis indicates the site presents a fraudulent login interface designed to harvest user credentials, potentially leading to unauthorized access to crypto wallets and financial theft. The domain remains operational as of the latest verification. Infrastructure analysis reveals the domain was registered on April 04, 2026, through Cloudflare, Inc., and currently resolves to the IP address 188.114.97.3, located in Canada and associated with Cloudflare’s network. The SSL certificate is issued by Google Trust Services (WE1), a common feature in phishing sites leveraging legitimate CDN services to appear credible. Security telemetry shows the domain is flagged by 1 of 95 vendors on VirusTotal, with one security blocklist currently listing it. The page title, 'Bitget Exchange - Innovative Crypto Trading Platform,' directly mimics the legitimate Bitget brand to deceive users. The site poses a high risk due to its active status, targeted impersonation of a major crypto exchange, and use of evasion tactics such as Cloudflare hosting. Organizations and users are advised to block the domain and associated IP at the network level. Endpoint protection should be updated to detect and prevent access to this domain. Users who may have interacted with the site should immediately reset their Bitget credentials, enable multi-factor authentication, and monitor accounts for unauthorized transactions. Security teams should treat this domain as a confirmed credential harvesting threat and prioritize remediation.